Gfi Software Kerio Control vulnerabilities

CVE-2025-34070 [CRITICAL] CWE-306 CVE-2025-34070: A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows u A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthenticated remote attackers to perform privileged operations. The GFIAgent service, responsible for integration with GFI AppManager, exposes HTTP services on ports 7995 and 7996 without proper authentication. The /proxy handler on port 7996 allo

CVE-2025-34069 [CRITICAL] CWE-306 CVE-2025-34069: An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default pro An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service. The non-transparent proxy on TCP port 3128 can be used to forward unauthenticated requests to internal services such as GFIAgent, bypassing firewall restrictions and exposing internal

CVE-2025-34071 [CRITICAL] CWE-306 CVE-2025-34071: A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrativ A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade feature. The system upgrade mechanism accepts unsigned .img files, which can be modified to include malicious scripts within the upgrade.sh or disk image components. These mo