Configuration Vulnerability in AION 2.0 by HCL Software
CVE-2025-52627

5.5MEDIUM

Key Information:

Vendor

HCL Software
Status
Aion
Vendor
CVE Published:
3 February 2026

What is CVE-2025-52627?

The configuration vulnerability in AION 2.0 arises from the root file system not being mounted as read-only, which can lead to unintended modifications of crucial system files. This flaw may expose the system to risks such as unauthorized changes and potential compromises. Effective mitigation strategies should be considered to prevent exploitation of this vulnerability and ensure the integrity of the system.

Affected Version(s)

AION 2.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.