Threat Intelligence Database

Barracuda Networks RMM versions prior to 2025.2.2 have a privilege escalation vulnerability due to incorrect permission assignment on the C:\Windows\Automation directory. Local attackers with limited privileges can place or modify files in this directory, which are executed with SYSTEM-level privileges during automation cycles. This allows attackers to gain SYSTEM-level access on affected systems. The vulnerability has a high severity with a CVSS score of 8.5. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or deserialization of untrusted types.

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.