CVE-2025-34069

CRITICAL EPSS 45.8%
Published Jul 2, 202512mo ago · Modified Jun 17, 20261w ago
9.5 CVSS 4.0
Critical
Find Similar
Published Jul 2, 2025 12mo ago
Last Modified Jun 17, 2026 1w ago

Description

An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service. The non-transparent proxy on TCP port 3128 can be used to forward unauthenticated requests to internal services such as GFIAgent, bypassing firewall restrictions and exposing internal management endpoints. This enables unauthenticated attackers to access the GFIAgent service on ports 7995 and 7996, retrieve the appliance UUID, and issue administrative requests via the proxy. Exploitation results in full administrative access to the Kerio Control appliance.

CVSS Details

Base Score
9.5
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
45.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-306 Missing Authentication for Critical Function Authentication

Affected Products 1

VendorProductVersionRange
gfikerio_control9.4.5any

References 2

  • ssd-disclosure.com https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/
    ExploitThird Party Advisory
  • vulncheck.com https://vulncheck.com/advisories/gfi-kerio-control-auth-bypass-rce
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.