PT-2026-60832 · Hclsoftware · Dfmpro For Catia+2

CVE-2025-59866 · Publicado 2026-07-17 · Atualizado 2026-07-17

Mitre

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2025-59866

Produtos afetados

Dfmpro For Catia

Dfxanalytics

Dfxserver

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-59866 · Nota de Segurança
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132365 · Nota