RCE in Riverbed Technology Steelcentral Netexpress
CVE-2025-34112
An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited t…
Vulnerability class: SQL Injection
EPSS: 0.686 (98.6th percentile) — read the EPSS interpretation.
Affected products
- Riverbed Technology Steelcentral Netexpress — versions 10.8.7
- Riverbed Technology Steelcentral Netprofiler — versions 10.8.7
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.exploit-db.com/exploits/40108 (exploit)
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/l… (exploit)
- support.riverbed.com/content/support/software/steelcentral-npm/net-profiler.html (product)
- www.vulncheck.com/advisories/riverbed-steel-central-net-profiler-net-express-rce (third-party-advisory)
Frequently asked questions
- What is CVE-2025-34112?
- CVE-2025-34112 is a vulnerability in Riverbed Technology Steelcentral Netexpress, classified under SQL Injection. Published 2025-07-15.
- Is CVE-2025-34112 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.