CVE Catalog
CVE-2025-34394
CriticalSummary
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.
Risk Assessment
Risk of remote code execution and full compromise of the RMM environment and its data.
Recommendation
Update Barracuda Service Center to version 2025.1.1 or later. Restrict access to the .NET Remoting service to trusted hosts only.
Original NVD description (English source)
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.