{"id":37470,"date":"2025-03-24T00:37:32","date_gmt":"2025-03-23T23:37:32","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=37470"},"modified":"2025-03-24T00:37:32","modified_gmt":"2025-03-23T23:37:32","slug":"cisa-warns-of-nakivo-backup-replication-vulnerability","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2025\/03\/24\/cisa-warns-of-nakivo-backup-replication-vulnerability\/","title":{"rendered":"CISA warns of NAKIVO Backup & Replication vulnerability"},"content":{"rendered":"

\"Sicherheit[German<\/a>]Does anyone in the readership use NAKIVO Backup & Replication for data backup? The US Cybersecurity Agency CISA has published a warning regarding a vulnerability in this solution. Administrators should apply the latest security updates.<\/p>\n

<\/p>\n

NAKIVO Backup & Replication<\/h2>\n

\"\"I had a quick look, NAKIVO Backup &amp; Replication is offered<\/a> in different countries, also in Germany. It is a backup solution that supports various platforms such as Windows, Linux, Amazon EC2, but also virtualization environments such as VMware, Proxmox, Hyper-V, Nutanix, etc.<\/p>\n

\"NAKIVO<\/p>\n

NAKIVO seems to be an alternative to Veeam. The solution for backup and replication is faster, cheaper and more reliable than Veeam. NAKIVO has a global network of over 8,000 partners and over 30,000 active customers in 183 countries. Companies such as Honda, Cisco, Coca-Cola and Siemens use this software internally.<\/p>\n

Vulnerability CVE-2024-48248 is actively exploited<\/h2>\n

The entry CVE-2024-48248<\/a> NAKIVO Backup and Replication Absolute Path Traversal Vulnerability<\/em> was added to the Known Exploited Vulnerabilities Catalog<\/a> on March 19, 2025. Entries of vulnerabilities in products in this catalog mean that the vulnerabilities are actively exploited in the wild by attackers.<\/p>\n

Details about CVE-2024-48248<\/h3>\n

NAKIVO Backup &amp;amp; Replication prior to version 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath<\/em> to \/c\/router<\/em>. This can lead to remote code execution across the organization as PhysicalDiscovery has clear text credentials.<\/p>\n

WatchTwr Labs disclosed the vulnerability in this post<\/a> at the end of February 2025. NAKIVO had already patched the vulnerability as of November 4, 2024 in version 110 (see\u00a0here<\/a>).<\/p>\n

CISA warning<\/h3>\n

The colleagues from Bleeping Computer have taken up the CISA warning in this article<\/a>. CISA has warned US federal agencies to secure their networks against attacks that exploit the CVE-2024-48248 vulnerability in NAKIVO's backup &amp; replication software.<\/p>\n

US Federal Civilian Executive Branch (FCEB) agencies now have three weeks, until April 9, to secure their systems against attacks. Does anyone in the readership use this software, and is it updated?<\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Does anyone in the readership use NAKIVO Backup & Replication for data backup? The US Cybersecurity Agency CISA has published a warning regarding a vulnerability in this solution. Administrators should apply the latest security updates.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,1547],"tags":[69,1544],"class_list":["post-37470","post","type-post","status-publish","format-standard","hentry","category-security","category-software","tag-security","tag-software"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=37470"}],"version-history":[{"count":1,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37470\/revisions"}],"predecessor-version":[{"id":37471,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37470\/revisions\/37471"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=37470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=37470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=37470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}