PT-2025-28962 · Undefined · Undefined

Cody Kretsinger · Published 2025-07-09 · Updated 2025-11-24 · CVE-2025-32353

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kaseya Rapid Fire Tools Network Detective version 2.0.16.0

Description Kaseya Rapid Fire Tools Network Detective stores unencrypted credentials (for privileged access) in the collector.txt configuration file.

Recommendations Ensure the collector.txt configuration file is securely stored and access is restricted to authorized personnel.

Fix

Improper Privilege Management

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-269

CWE-312

Related Identifiers

CVE-2025-32353

Affected Products

Undefined

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-32353 · Security Note
• https://twitter.com/CVEnew/status/1945562992428331068 · Twitter Post
• https://t.me/cvetracker/27966 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1945617464647119224 · Twitter Post
• https://galacticadvisors.com · Note
• https://t.me/secharvester/19569 · Telegram Post
• https://t.me/cveNotify/143812 · Telegram Post
• https://galacticadvisors.com/release/cve · Note
• https://galacticadvisors.com/release/critical-vulnerabilities-in-network-detective · Note
• https://reddit.com/r/msp/comments/1lvr5e6/network_detective_tool_potential_security_issue · Reddit Post
• https://codykretsinger.com · Note
• https://t.me/cvenotify/129378 · Telegram Post