Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Priority MEDIUM 45

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read a…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00753 Published 2025-12-10 Fixed in 2025.1.1 CWE-22
Priority MEDIUM 50

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00707 Published 2025-12-10 Fixed in 2025.1.1 CWE-502
Priority MEDIUM 50

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00707 Published 2025-12-10 Fixed in 2025.1.1 CWE-470
Priority HIGH 82

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.24721 Published 2025-12-10 Fixed in 2025.1.1 CWE-36