Denial of Service Vulnerability in HX Console by Trellix

CVE-2025-0617

Summary

An attacker with access to Trellix HX console versions 10.0.0 and earlier can exploit the system by sending specially-crafted data. This malicious data triggers a file parsing issue, leading to exponential entity expansions that overwhelm the consumer process and result in a Denial of Service. It is crucial to mitigate this vulnerability to protect against potential disruptions in service.

References