Unrated severityNVD Advisory· Published Dec 10, 2025· Updated Mar 5, 2026
Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE
CVE-2025-34395
Description
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution by retrieving the .NET machine keys.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2025.1.1
- Barracuda Networks/RMMv5Range: 2025.1
Patches
Vulnerability mechanics
References
3- download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdfmitrevendor-advisorypatch
- www.vulncheck.com/advisories/barracuda-rmm-service-center-net-remoting-path-traversal-rcemitrethird-party-advisory
- www.barracuda.com/products/msp/network-protection/rmmmitreproduct
News mentions
0No linked articles in our index yet.