CVE-2025-31977
A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
28 Aug 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
HCL Software · BigFix Service Management (SM)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →