CVE-2025-8875

Published Aug 14, 2025

Last updated 2 days ago

N-central

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-8875 is a deserialization of untrusted data vulnerability affecting N-able N-central. This vulnerability could allow for local code execution. It affects N-central versions before 2025.3.1. The Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild. CISA has directed organizations to apply vendor-provided mitigations, follow BOD 22-01 guidance for cloud services, or discontinue using the product if mitigations are unavailable.

Description: Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
Source: a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
NVD status: Analyzed
Products: n-central

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.4
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: N-able N-Central Insecure Deserialization Vulnerability
Exploit added on: Aug 13, 2025
Exploit action due: Aug 20, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

a5532a13-c4dd-4202-bef1-e0b8f2f8d12b: CWE-502

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BBFDA053-AF76-4028-8595-41B18D37717B",
            "versionEndExcluding": "2025.3.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.