MSRXVulnerabilities / CVE-2025-30406
CVE-2025-30406
Published 2025-04-03 · published (not yet in NVD)
CVE-2025-30406
Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2025-04-08. Patch it first.
9.0 CRITICAL
CVSS 3.1 · CNA
CVSS 3.1 · CNA
94%
chance of exploitation in the next 30 days (EPSS; in the top 1% of all CVEs)
chance of exploitation in the next 30 days (EPSS; in the top 1% of all CVEs)
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution. NOTE: a CentreStack admin can manually delete the machineKey defined in portal\web.config.
Scores
Affected products
- Gladinet CentreStack: < 16.4.10315.56368
Weakness: CWE-321
2 references (advisories, patches, write-ups)
Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.