← back
CVE-2025-48501

CVE-2025-48501

CVSS 9.3 CRITICALEPSS 1.3%CWE-78
An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Nimesa · Nimesa Backup and Recovery

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://aws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2chttps://jvn.jp/en/jp/JVN88251376/