CVE-2025-11367

The error classified as CWE-502 (Deserialization of Untrusted Data) involves the Software Probe component processing externally supplied serialized data without proper validation of its origin and content. An attacker requiring no authentication can deliver a crafted payload over the network, which is executed in the service process context during deserialization. The attack vector is network-based, requires no user interaction, and no elevated privileges, meaning full remote exploitation is possible.

An attacker can obtain remote code execution on the system running N-central Software Probe, and the high impact on confidentiality, integrity, and availability of both the local system and connected systems indicates the possibility of complete control takeover and potential lateral movement in the managed infrastructure.

N-central Software Probe should be updated to version 2025.4 or later as soon as possible. Detailed instructions are available in the official security bulletin from the vendor at the address indicated in the references. Until the update is applied, consider restricting network access to ports used by Software Probe to trusted sources only.

N-Able N-Central Software Probe in versions earlier than 2025.4 (component running on Windows systems).