{"id":"CVE-2025-34393","title":"Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection","summary":"Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execut…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-470"],"vendor":"barracuda","product":"rmm","affected":["rmm < 2025.1.1"],"patched":["rmm 2025.1.1"],"published":"2025-12-10","updated":"2026-10-14","sourceUpdated":"2026-10-14T21:10:00.183","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-34393","references":[{"url":"https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf","label":"disclosure@vulncheck.com"},{"url":"https://www.barracuda.com/products/msp/network-protection/rmm","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/barracuda-rmm-service-center-insecure-reflection-rce","label":"disclosure@vulncheck.com"}],"tags":["nvd"],"epss":0.00707,"epssPercentile":0.52367,"ingestedAt":"2026-10-14T21:57:04.783Z","slug":"CVE-2025-34393","body":"## Overview\n\nBarracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or deserialization of untrusted types.\n\n## Affected\n\n- `rmm < 2025.1.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `rmm 2025.1.1`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}