VDB
CVE-2024-48248
CVE-2024-48248
PUBLISHED
KEV
CVSS 8.600000381469727 HIGH
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
EPSS 94.36% · 99.8th percentile
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Score
94.36%
99.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nakivo | backup_\&_replication_director | 0, 0, 0 |
| NAKIVO | Backup & Replication Director | 0, 0 |
| Qnap | NAKIVO Backup & Replication |
Timeline
- Feb 26, 2025 PoC Published
- Feb 26, 2025 PoC Published
- Feb 26, 2025 PoC Published
- Feb 26, 2025 VulnCheck XDB Entry
- Feb 26, 2025 PoC Published
- Feb 26, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
References
- Nuclei Template exploit
- https://www.qnap.com/go/security-advisory/qsa-25-08 advisory
- https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/ advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-48248 advisory
- https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm url
- https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248 url
- https://github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248/?ref=labs.watchtowr.com exploit
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-48248 advisory