CVE-2025-57789mediumCWE-257

CVE-2025-57789: falha de média gravidade em Commvault CommCell

Vulnerability in Initial Administrator Login Process

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CommCell

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 5.3epss 1.2%
During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Commvault · CommCell
CVEs relacionadas — Commvault CommCell

No mesmo produto, das mais perigosas para as menos.

CVE-2021-34996HIGHCVE-2021-34996EPSS 82.3%CVE-2021-34995HIGHCVE-2021-34995EPSS 68.9%CVE-2025-57790HIGHPath Traversal VulnerabilityEPSS 43.9%CVE-2025-57791MEDIUMArgument Injection Vulnerability in CommServeEPSS 38.8%CVE-2025-57788MEDIUMUnauthorized API Access RiskEPSS 7.8%CVE-2021-34994HIGHCVE-2021-34994EPSS 5.8%