CVE-2025-31974: HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow
unintended modifications to critical system components, potentially increasing the risk of system compromise or unauthorized changes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Mount the root file system as read-only to prevent unintended modifications to critical system components.
HCL BigFix Service Management (SM) root file system root file system mount mode = read-only
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31974?
CVE-2025-31974 has a critical severity due to the risk of unintended modifications to the critical system components.
How do I fix CVE-2025-31974?
To resolve CVE-2025-31974, ensure that the root file system is configured to be mounted as read-only.
What systems are affected by CVE-2025-31974?
CVE-2025-31974 specifically affects HCL BigFix Service Management (SM).
What type of vulnerability is CVE-2025-31974?
CVE-2025-31974 is a configuration vulnerability related to the mounting of the root file system.
What are the potential impacts of CVE-2025-31974?
The impact of CVE-2025-31974 includes the risk of unauthorized alterations to critical system files, leading to security breaches.