Vulnerability · Published Dec 10, 2025 · Assigned by VulnCheck
CVE-2025-34392Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE
Critical 10.0
In plain English
A critical-severity security flaw in RMM from Barracuda Networks. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 24.7% (higher than 98% of all known vulnerabilities).
Severity (CVSS 4.0)10.0Critical
Exploit odds (30 days)24.7%top 2.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Barracuda Networks | RMM | 2025.1 – before 2025.1.1 |
Weakness: CWE-36 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
References
- https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf vendor-advisory, patch
- https://www.barracuda.com/products/msp/network-protection/rmm product
- https://www.vulncheck.com/advisories/barracuda-rmm-service-center-absolute-path-traversal-rce third-party-advisory
- https://labs.watchtowr.com/soapwn-pwning-net-framework-applications-through-http-client-proxies-and-wsdl/ exploit