VDB
CVE-2024-48248
CVE-2024-48248
PUBLISHED
KEV
CVSS 8.600000381469727 HIGH
Une vulnérabilité a été découverte dans Qnap NAKIVO Backup & Replication. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.
EPSS 94.01% · 99.9th percentile
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Score
94.01%
99.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nakivo | backup_\&_replication_director | 0, 0 |
| NAKIVO | Backup & Replication Director | 0 |
| Qnap | NAKIVO Backup & Replication |
Timeline
- Dec 27, 2022 CrowdSec Sighting
- Dec 28, 2022 CrowdSec Sighting
- Feb 8, 2023 CrowdSec Sighting
- Feb 17, 2023 CrowdSec Sighting
- Feb 28, 2023 CrowdSec Sighting
- Mar 9, 2023 CrowdSec Sighting
- Apr 5, 2023 CrowdSec Sighting
- Apr 26, 2023 CrowdSec Sighting
- Aug 10, 2023 CrowdSec Sighting
- Oct 15, 2023 CrowdSec Sighting
- Nov 6, 2023 CrowdSec Sighting
- Nov 23, 2023 CrowdSec Sighting
References
- https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/ url
- https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm url
- https://github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248/?ref=labs.watchtowr.com exploit
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-48248 url
- https://nvd.nist.gov/vuln/detail/CVE-2024-48248 advisory
- https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248 url
- https://www.qnap.com/go/security-advisory/qsa-25-08 advisory