Vulnerability · Published Aug 28, 2025 · Assigned by HCL
CVE-2025-31977A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)
Medium 5.3
In plain English
A medium-severity security flaw in BigFix Service Management (SM) from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.1%top 99.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | BigFix Service Management (SM) | 23 |
Weakness: CWE-311 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N