VULNERABILITY INTELLIGENCE
CVE-2025-32977
CVSS score9.6 CRITICAL
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Description
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) allows unauthenticated users to upload backup files to the system. While signature validation is implemented, weaknesses in the validation process can be exploited to upload malicious backup content that could compromise system integrity.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-347