Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE
Vulnerability Description
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution by retrieving the .NET machine keys.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-34395
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Piotr Bazydlo of watchTowr
References
More from Barracuda Networks
View All →Affected Vendor
Barracuda Networks
View all reports →