{"id":86529,"date":"2026-02-23T00:24:48","date_gmt":"2026-02-23T00:24:48","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-32978-unauthenticated-license-replacement-vulnerability-in-quest-kace-systems-management-appliance","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-32978-unauthenticated-license-replacement-vulnerability-in-quest-kace-systems-management-appliance\/","title":{"rendered":"CVE-2025-32978: Unauthenticated License Replacement Vulnerability in Quest KACE Systems Management Appliance<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-32978 vulnerability poses a significant threat to users of the Quest KACE Systems Management Appliance (SMA). It allows unauthorized users to replace valid system licenses with expired or trial ones, potentially leading to system compromise or data leakage. This vulnerability affects specific versions of the appliance and could lead to a denial of service if exploited, highlighting the importance of immediate patching or implementation of temporary mitigation strategies.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-32978
\nSeverity: High (7.5 CVSS score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise, data leakage, denial of service<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Quest KACE Systems Management Appliance (SMA) | 13.0.x before 13.0.385
\nQuest KACE Systems Management Appliance (SMA) | 13.1.x before 13.1.81
\nQuest KACE Systems Management Appliance (SMA) | 13.2.x before 13.2.183
\nQuest KACE Systems Management Appliance (SMA) | 14.0.x before 14.0.341 (Patch 5)
\nQuest KACE Systems Management Appliance (SMA) | 14.1.x before 14.1.101 (Patch 4)<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit takes advantage of an unprotected web interface intended for license renewal. An attacker can manipulate this interface to replace valid system licenses with expired or trial ones, without needing to authenticate. This can cause a denial of service, as the system will cease to function correctly with an invalid license. It can also lead to a potential system compromise or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Below is a conceptual example of how the vulnerability might be exploited using a malicious HTTP POST request.<\/p>\n

POST \/licenseRenewal HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/json\n{ \"license_key\": \"EXPIRED_LICENSE_KEY\" }<\/code><\/pre>\n
In this example, the attacker sends a POST request with an expired license key to the “\/licenseRenewal” endpoint. The server, lacking proper authentication checks, accepts the new license key, thus causing a denial of service or potential system compromise.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The CVE-2025-32978 vulnerability poses a significant threat to users of the Quest KACE Systems Management Appliance (SMA). It allows unauthorized users to replace valid system licenses with expired or trial ones, potentially leading to system compromise or data leakage. This vulnerability affects specific versions of the appliance and could lead to a denial of […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86529","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t