NAKIVO Backup & Replication任意文件读取漏洞

2025-02-27 NAKIVO Backup Replication PoC No

Description

NAKIVO Backup & Replication 是一款快速、经济实惠且一流的备份和灾难恢复解决方案，适用于 VMwarevSphere、Microsoft Hyper-V、Nutanix AHV、Amazon EC2、Windows/Linux 和 Microsoft 365环境。备份服务器可以安装在 Windows、Linux 和 NAS 操作系统上，尤其适合中小企业市场。NAKIVO Backup &Replication任意文件读取漏洞，攻击者可利用该漏洞获取系统敏感文件。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://www.secrss.com/articles/76092
https://wlaq.dlut.edu.cn/info/1095/6744.htm
https://www.venustech.com.cn/new_type/aqsjxy/20250228/28382.html
https://www.jscfa.edu.cn/zhxyzx/2025/0313/c2073a35261/page.htm
https://www.tenablecloud.cn/plugins/was/114612
https://www.secevery.com/toBugInfo?id=1895001012446216193
https://mvip.tophant.com/detail/1895019845175611392
https://anquanfuwu.net/article/detail/67c03e9114037f0e4935dec2
https://www.webplus.com.tw/it250313/
https://www.ddpoc.com/DVB-2025-8883.html
https://cn-sec.com/archives/3777801.html
https://www.venustech.com.cn/new_type/aqtg/20250227/28413.html
https://www.vbuster.com.tw/NAKIVO/Announcement/C010001?ID=32395ba8-6d73-4687-8b8b-c37fe8212f3c&PageType=1
https://zh-tw.tenable.com/plugins/was/114612
https://www.ithome.com.tw/news/167782
https://cn-sec.com/archives/3777518.html
https://helpcenter.nakivo.com/Knowledge-Base/Content/Security-Advisory/CVE-2024-48248.htm
https://nvd.nist.gov/vuln/detail/CVE-2024-48248
https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/
https://github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248

Description

PoC

References

Related Vulnerabilities