CVE-2025-59866

LOW

Hclsoftware DFMPro For Catia - Incorrect Permission Assignment for Critical Resource

Title source: rule

Description

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

References (1)

Core 1

Core References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132365

Scores

CVSS v3 3.3

EPSS 0.0007

EPSS Percentile 0.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-732

Status published

Products (3)

HCLSoftware/DFMPro for CATIA v4.1

HCLSoftware/DFXAnalytics v3.1

HCLSoftware/DFXServer v3.1

Published Jul 17, 2026

Tracked Since Jul 17, 2026