The vulnerability arises because HCL BigFix Service Management’s root file system is not mounted as read‑only. This configuration flaw can allow attackers to modify critical system components, potentially leading to system compromise or unauthorized changes. The weakness is identified as CWE-1188. Based on the description, it is inferred that the vulnerability can be exploited by changing file permissions or mounting options during operation, though the exact attacker capabilities are not explicitly stated.

The affected product is HCL Software’s BigFix Service Management (SM). No specific version information is provided in the advisory, so administrators should verify that their installations are running the product and that no version limitation applies.

The CVSS score of 3.9 indicates low severity. Because the flaw involves a writable root file system, the likely attack vector is a local or privileged attacker who can manipulate mounting options or modify system files. The lack of an EPSS score and absence from the CISA KEV catalog suggest a low likelihood of exploitation. Nonetheless, the possibility of unauthorized changes to critical components warrants monitoring and ensuring proper mount settings.