Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-31981 HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access. An attacker with a… https://www.cve.org/CVERecord?id=CVE-2025-31981
Post summary
CVE‑2025‑31981 reveals that HCL BigFix Service Management (SM) Discovery exposes an unsecured HTTP endpoint on port 80, permitting unauthenticated unencrypted access.
🚨*CVE* CVE-2025-31981 HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access. An attacker with a… https://www.cve.org/CVERecord?id=CVE-2025-31981 ----- Traducción: CVE-2025-31981 HCL… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2025‑31981, noting that HCL BigFix Service Management Discovery exposes data over an unsecured HTTP port. No PoC, exploit, active exploitation, or patch information is mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | bigfix_service_management | 23.0 | - | - |