Barracuda RMM .NET Remoting Deserialization Vulnerability Leading to Remote Code Execution

A remote code execution vulnerability exists in Barracuda Service Center's RMM solution, in versions prior to 2025.1.1. The issue arises from a .NET Remoting service that inadequately safeguards against the deserialization of arbitrary types.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users are advised to update to Barracuda RMM version 2025.1.1 or later. The HotFix for this update is available at the bottom of the Previous Versions page on Barracuda Campus, but requires a Campus account and login.