CVE-2024-48248 - CVE House
Back to Database
Status published High CVE-2024-48248

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal...

Vulnerability Description

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-48248

Credits & Attribution

No credits recorded in the NVD database.

References

More from NAKIVO

View All →
CVE-2025-32406
An XXE issue in the Director NBR component in NAKIVO...
High 8.6

Affected Vendor

Affected Software

Backup & Replication Director
Vulnerable Versions:
0

Timeline

Official Publish: March 4th, 2025
Last Modified: October 21st, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-36

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.