Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

CVE-2025-32975

More InfoOfficial Page

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

QuestKACE Systems Management Appliance (SMA)

Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials.

Required Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Related Information

Vendor/Project:Quest Software, Inc.Quest
Product:KACE Systems Management Appliance (SMA)
CWE:
CWE-287
Used in Ransomware:Unknown

Timeline

Date Added:20 Apr, 2026
Due Date:04 May, 2026

Additional Notes

https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32975
Details not found