What is CVE-2025-0618?

CVE-2025-0618 is a medium-severity vulnerability in Trellix Fireeye Edr Hx, classified under Code Injection. CVSS score: 6.5/10. Published 2025-04-23.

How severe is CVE-2025-0618?

Medium severity. CVSS v3 base score is 6.5 out of 10.

RCE in Trellix Fireeye Edr Hx

CVE-2025-0618

A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Trellix Fireeye Edr Hx — versions HX 10.0.0

Weakness classification (CWE)

CWE-94 — Code Injection

References

trellixpsirt@trellix.com

Frequently asked questions

What is CVE-2025-0618?: CVE-2025-0618 is a medium-severity vulnerability in Trellix Fireeye Edr Hx, classified under Code Injection. CVSS score: 6.5/10. Published 2025-04-23.
How severe is CVE-2025-0618?: Medium severity. CVSS v3 base score is 6.5 out of 10.