CVE-2025-32975

Published Jun 24, 2025

Last updated 18 days ago

Exploit known CVSS critical 10.0

Smb

Cloud

SMA

Quest KACE

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-32975 is an authentication bypass vulnerability found in the Quest KACE Systems Management Appliance (SMA). This flaw specifically resides within the Single Sign-On (SSO) authentication handling mechanism of the affected software. Exploitation of this vulnerability allows an attacker to impersonate legitimate users, including those with administrative privileges, without needing valid credentials. This can lead to unauthorized access and potential administrative control over the compromised KACE SMA system. The vulnerability is categorized under CWE-287, which refers to improper authentication.

Description: Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.
Source: cve@mitre.org
NVD status: Analyzed
Products: kace_systems_management_appliance

Risk scores

CVSS 3.1

Type: Secondary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
Exploit added on: Apr 20, 2026
Exploit action due: May 4, 2026
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "89896426-35FC-4C39-9825-1B2F15062A02",
            "versionEndExcluding": "13.0.385",
            "versionStartIncluding": "13.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6F19C73E-1C5F-4425-AE45-468B42CCB4B3",
            "versionEndExcluding": "13.1.81",
            "versionStartIncluding": "13.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F6B8BAB0-CC3B-4509-96E1-34382A156835",
            "versionEndExcluding": "13.2.183",
            "versionStartIncluding": "13.2",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8EC79AEC-90FA-4416-8DB7-E468F30075A4",
            "versionEndExcluding": "14.0.341",
            "versionStartIncluding": "14.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "07B00B0E-5ADF-48BC-8191-E7CE8A947130",
            "versionEndExcluding": "14.1.101",
            "versionStartIncluding": "14.1",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.