PT-2025-50337 · Barracuda Networks · Barracuda Service Center

Piotr Bazydlo · CVE-2025-34394 · Published 1999-01-01 · Updated 2025-12-23

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Barracuda Service Center versions prior to 2025.1.1

Description Barracuda Service Center, part of the RMM solution, has a .NET Remoting service that does not adequately protect against the deserialization of arbitrary types. This can allow for remote code execution.

Recommendations Update Barracuda Service Center to version 2025.1.1 or later.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-34394

DOTNETREMOTINGCHECK

Affected Products

Barracuda Service Center

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-34394 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34394 · Vendor Advisory
• https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf · Patch, Vendor Advisory
• https://vulncheck.com/advisories/barracuda-rmm-service-center-net-remoting-deserialization-rce · Note
• https://t.me/CVEtracker/39362 · Telegram Post
• https://t.me/cveNotify/146659 · Telegram Post
• https://barracuda.com/products/msp/network-protection/rmm · Note
• https://twitter.com/CVEnew/status/2000248643602051407 · Twitter Post