CVE-2025-34392 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that…
Critical CVSS: 10.0

CVE-2025-34392

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.
Vendor
Barracuda
Product
Rmm
CWE
CWE-36
Yayın Tarihi
2025-12-10 16:16:24
Güncelleme
2025-12-23 14:40:40
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-36 Rmm CRITICAL Barracuda 2025

Referanslar

https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf https://labs.watchtowr.com/soapwn-pwning-net-framework-applications-through-http-client-proxies-and-wsdl/ https://www.barracuda.com/products/msp/network-protection/rmm https://www.vulncheck.com/advisories/barracuda-rmm-service-center-absolute-path-traversal-rce