Hcl CVE-2025-55276

Real-world priority is LOW despite the remote attack vector. The CVSS v3.1 vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) reflects low severity: no confidentiality loss, no integrity violation, only limited availability impact (single-parameter consequence). The SSVC framework corroborates this: exploitation status is listed as 'none' (no confirmed active exploitation), the attack is not automatable (AC:H and UI:R prevent scripted mass exploitation), and technical impact is partial (network reconnaissance only). The absence of a Known Exploited Vulnerability (KEV) flag from CISA and lack of public exploit code further reduce exploitation probability. However, the vulnerability retains strategic value in multi-stage attacks: an attacker who can trigger the IP disclosure gains network topology intelligence useful for lateral movement, firewall bypass planning, or VPN concentration point identification. Organizations with defense-in-depth architectures and segmented networks will see minimal operational risk; those relying on obscurity of internal IP ranges should prioritize patching or compensating controls.

An attacker sends a crafted request to an Aftermarket DPC instance that induces the application to disclose internal IP addresses in an error response or response header. Because the attack requires high complexity (AC:H) and user interaction (UI:R), the attacker may combine this with a spear-phishing email directing a system administrator to click a link or open a file that triggers the vulnerable code path. Once the internal IP range (e.g., 10.0.x.x or 172.16.x.x) is exposed, the attacker gains a clearer map of the organization's network layout-identifying which subnets exist, which devices respond, and potentially which internal services are running-enabling more targeted follow-on reconnaissance or exploitation attempts against other systems. No public exploit code or proof-of-concept has been identified, so exploitation currently requires manual crafting by an attacker with knowledge of the vulnerability.