{"id":"CVE-2025-34395","title":"Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files","summary":"Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. T…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-22"],"vendor":"barracuda","product":"rmm","affected":["rmm < 2025.1.1"],"patched":["rmm 2025.1.1"],"published":"2025-12-10","updated":"2026-10-14","sourceUpdated":"2026-10-14T21:10:00.183","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-34395","references":[{"url":"https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf","label":"disclosure@vulncheck.com"},{"url":"https://www.barracuda.com/products/msp/network-protection/rmm","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/barracuda-rmm-service-center-net-remoting-path-traversal-rce","label":"disclosure@vulncheck.com"}],"tags":["nvd"],"epss":0.00753,"epssPercentile":0.54034,"ingestedAt":"2026-10-14T21:57:04.784Z","slug":"CVE-2025-34395","body":"## Overview\n\nBarracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution by retrieving the .NET machine keys.\n\n## Affected\n\n- `rmm < 2025.1.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `rmm 2025.1.1`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}