{"id":86529,"date":"2026-02-23T00:24:48","date_gmt":"2026-02-23T00:24:48","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-32978-unauthenticated-license-replacement-vulnerability-in-quest-kace-systems-management-appliance","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-32978-unauthenticated-license-replacement-vulnerability-in-quest-kace-systems-management-appliance\/","title":{"rendered":"CVE-2025-32978: Unauthenticated License Replacement Vulnerability in Quest KACE Systems Management Appliance<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-32978 vulnerability poses a significant threat to users of the Quest KACE Systems Management Appliance (SMA). It allows unauthorized users to replace valid system licenses with expired or trial ones, potentially leading to system compromise or data leakage. This vulnerability affects specific versions of the appliance and could lead to a denial of service if exploited, highlighting the importance of immediate patching or implementation of temporary mitigation strategies.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-32978
\nSeverity: High (7.5 CVSS score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise, data leakage, denial of service<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n