← Database

CVE-2024-48248

HIGH CVSS: 8.6 Published: 2025-03-04 Modified: 2026-06-17

Description

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).

Affected Platforms

Nakivo Backup \& Replication Director

Weakness Type

CWE-36, NVD-CWE-Other

References