VULNERABILITY INTELLIGENCE

CVE-2024-48248

CVSS score8.6 HIGH

EPSS probability94.36%

CISA KEVKnown exploited vulnerability

Published2025-03-04

Last modified2026-09-24

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Known Exploited Vulnerability

NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

Vendor / product: NAKIVO / Backup and Replication

Description

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).

Weakness classification

cve@mitre.org: CWE-36
nvd@nist.gov: NVD-CWE-Other

Primary references

cve@mitre.org — Product
cve@mitre.org — Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource