How severe is CVE-2025-55113?

CVE-2025-55113 has a CVSS 3.x base score of 9.0, rated critical severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2025-55113 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (19th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-55113?

CVE-2025-55113 affects Bmc Control-m/agent. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-55113?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

Does CVE-2025-55113 have an EU (EUVD) identifier?

Yes. CVE-2025-55113 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-29569.

When was CVE-2025-55113 published?

CVE-2025-55113 was published on 2025-09-16 and last updated on 2026-06-17.

CVE-2025-55113

CVE-2025-55113 is a critical-severity vulnerability in Bmc Control-m/agent with a CVSS 3.x base score of 9.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-158.

Key facts

Severity: Critical (CVSS 3.x base score 9.0)
CVSS v4: 9.5
EPSS exploit prediction: 0% (19th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-29569
Weakness: CWE-158
Affected product: Bmc Control-m/agent
Published: 2025-09-16
Last modified: 2026-06-17

Description

If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions; non-default but configurable using the JAVA_AR setting in newer versions), the verification stops at the first NULL byte encountered in the email address referenced in the client certificate. An attacker could bypass configured ACLs by using a specially crafted certificate.

Frequently asked questions

What is CVE-2025-55113?: If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions; non-default but configurable using the JAVA_AR setting in newer versions), the verification stops at the first NULL byte encountered in the email address referenced in the client certificate. An attacker could bypass configured ACLs by using a specially crafted certificate.
How severe is CVE-2025-55113?: CVE-2025-55113 has a CVSS 3.x base score of 9.0, rated critical severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2025-55113 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (19th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-55113?: CVE-2025-55113 affects Bmc Control-m/agent. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-55113?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
Does CVE-2025-55113 have an EU (EUVD) identifier?: Yes. CVE-2025-55113 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-29569.
When was CVE-2025-55113 published?: CVE-2025-55113 was published on 2025-09-16 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:bmc:control-m\/agent:*:*:*:*:*:*:*:*

More vulnerabilities in Bmc Control-m/agent

CVE-2025-55109 — Critical (CVSS 9.0): An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and…
CVE-2025-55116 — High (CVSS 8.8): A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the…
CVE-2025-55115 — High (CVSS 8.8): A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the…
CVE-2025-55112 — High (CVSS 7.4): Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are…
CVE-2025-55111 — Medium (CVSS 5.5): Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18…
CVE-2025-55117 — Medium (CVSS 5.3): A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when…

All CVEs affecting Bmc Control-m/agent →

Other CWE-158 vulnerabilities

CVE-2025-47812 — Critical (CVSS 10.0): In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection…
CVE-2025-14388 — Critical (CVSS 9.8): The PhastPress plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read via null byte injection in all…
CVE-2023-5719 — High (CVSS 8.8): The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for…
CVE-2009-1537 — High (CVSS 8.8): Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0…
CVE-2025-9648 — High (CVSS 8.7): A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial…
CVE-2026-33191 — High (CVSS 8.6): Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to…

Browse all CWE-158 vulnerabilities →