CVE-2024-48248

Published Mar 4, 2025

Last updated 23 days ago

NAKIVO

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-48248 is an absolute path traversal vulnerability found in NAKIVO Backup & Replication software versions before 11.0.0.88174. This vulnerability allows an unauthenticated attacker to read arbitrary files on the target host. The vulnerability is located in the `/c/router` endpoint, which can be exploited via `getImageByPath`. Successful exploitation of CVE-2024-48248 can lead to the exposure of sensitive information, including configuration files, backups, and credentials. This could potentially lead to data breaches or further security compromises. The vulnerability has been addressed in version 11.0.0.88174 of NAKIVO Backup & Replication.

Description: NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.6
Impact score: 4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
Exploit added on: Mar 19, 2025
Exploit action due: Apr 9, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

cve@mitre.org: CWE-36
nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:nakivo:backup_\\&_replication_director:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "25166311-9271-42C2-ADFB-0210B9487BEB",
            "versionEndExcluding": "11.0.0.88174"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]