CVE-2025-34394 in RMM

الملخص

بحسب MITRE • 10/12/2025

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: VulnCheck
• حجز: 15/04/2025
• إفشاء: 10/12/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-335605
• CPE: جاهز
• CWE: CWE-502 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.00617
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-34394
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-34394
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-34394/