CVE-2024-48248
NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
Published Mar 4, 2025 · updated Sep 24, 2026 · nakivo backup & replication director
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 4, 2025 · Catalog
Detected
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
Mar 19, 2025 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Apr 9, 2025 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Sep 24, 2026 · Catalog
Updated
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Apr 9, 2025
Affected
- cpe nakivo/backup & replication directorversion unspecified
- vendor NAKIVO Backup and Replicationversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2024-48248
NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files.
cisa.gov - CVE.orgVulnerability recordCVE-2024-48248
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2024-48248
30-day exploitation probability 94.4%
first.org - NIST NVDVulnerability recordCVE-2024-48248
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
nvd.nist.gov