CVE-2025-32975criticalunder attackCWE-287

CVE-2025-32975

Published · Updated

Follow this CVE+ Monitor KACE Systems Management Appliance

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

58Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 10epss 2.5%
from disclosure to weapon
Published on NVDJun 24
CISA KEV+300d
Action required by CISAfederal deadline: 2026-05-04

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

Quest KACE SMA has a critical flaw in its login system that lets attackers pretend to be real users without needing passwords. This can give attackers complete control over the device.

Technical detail

An authentication bypass in the SSO mechanism (CWE-287) allows unauthenticated attackers to impersonate legitimate users and gain administrative access. The vulnerability affects multiple versions and requires no valid credentials, resulting in complete compromise of the appliance.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
n/a · n/a