Gladinet CentreStack Remote Code Execution (RCE) Vulnerability via Hardcoded machineKey (CVE-2025-30406) Critical Security Advisory

# Define the path to the portal web.config
$configPath = 'C:\Program Files (x86)\Gladinet CentreStack\portal\web.config'

if (Test-Path $configPath) {
    [xml]$xml = Get-Content $configPath
    $machineKeyNode = $xml.SelectSingleNode('//system.web/machineKey')
    if ($machineKeyNode) {
        # Remove the hardcoded machineKey node
        [void]$machineKeyNode.ParentNode.RemoveChild($machineKeyNode)
        $xml.Save($configPath)
        Write-Host '[SUCCESS] Hardcoded machineKey removed successfully.' -ForegroundColor Green
        # Restart IIS to apply changes
        Restart-Service -Name 'W3SVC'
    } else {
        Write-Host '[INFO] No machineKey node found. It may have already been removed.' -ForegroundColor Yellow
    }
} else {
    Write-Host '[ERROR] web.config file not found.' -ForegroundColor Red
}

# Audit script to check for the presence of the vulnerable machineKey
$configPath = 'C:\Program Files (x86)\Gladinet CentreStack\portal\web.config'

Write-Host '=== Auditing CentreStack Configuration ===' -ForegroundColor Cyan
if (Test-Path $configPath) {
    [xml]$xml = Get-Content $configPath
    $machineKey = $xml.SelectSingleNode('//system.web/machineKey')
    if ($machineKey) {
        Write-Host '[WARNING] Vulnerable hardcoded machineKey is present!' -ForegroundColor Red
        Write-Host ('Validation Key: ' + $machineKey.validationKey) -ForegroundColor DarkYellow
    } else {
        Write-Host '[SAFE] No hardcoded machineKey detected.' -ForegroundColor Green
    }
} else {
    Write-Host '[ERROR] Target web.config file could not be found.' -ForegroundColor Red
}