VDB
BDU%3A2026-00088
BDU%3A2026-00088
PUBLISHED
CVSS 7.5 HIGH
Уязвимость инструмента для комплексного управления сетевыми устройствами Quest KACE Systems Management Appliance (SMA), связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Quest Software Inc. | Quest KACE Systems Management Appliance (SMA) | |
| n/a | n/a | n/a |
Timeline
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 24, 2025 PoC Published
- Jun 25, 2025 PoC Published
- Jun 30, 2025 PoC Published
- Dec 19, 2025 PoC Published
- Dec 21, 2025 PoC Published
- Dec 21, 2025 PoC Published
- Jan 6, 2026 CVE Published
- Mar 20, 2026 PoC Published
References
- https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978 url
- https://www.theregister.com/2025/12/19/watchguard_firebox/ url
- https://seclists.org/fulldisclosure/2025/Jun/25 advisory
- http://seclists.org/fulldisclosure/2025/Jun/25 url
- https://seralys.com/research/CVE-2025-32978.txt advisory