VDB
BDU%3A2025-10708
BDU%3A2025-10708
PUBLISHED
CVSS 10 CRITICAL
Уязвимость инструмента для комплексного управления сетевыми устройствами Quest KACE Systems Management Appliance (SMA), связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процедуру аутентификации
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Quest Software Inc. | Quest KACE Systems Management Appliance (SMA) |
Timeline
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 25, 2025 PoC Published
- Jun 30, 2025 PoC Published
- Sep 3, 2025 CVE Published
- Mar 20, 2026 PoC Published
- Mar 20, 2026 PoC Published
- Mar 20, 2026 PoC Published
- Mar 21, 2026 PoC Published
- Mar 21, 2026 PoC Published
References
- http://seclists.org/fulldisclosure/2025/Jun/25 url
- https://seclists.org/fulldisclosure/2025/Jun/22 url
- https://seralys.com/research/CVE-2025-32975.txt advisory
- https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978 url