S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Product Based Web Vulnerabilities·Updated Feb 27, 2025

CVE-2024-48248 Scanner

Targets the /api/rest/backup endpoint to read arbitrary files without authentication, exposing sensitive system data.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, subdomain, ipv4
CostFree
2.7k
Times Used
continuous scan runs
3.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2024-48248
8.6
CVSShigh
Exploitable remotely over the internet · no authentication required.

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Backup & Replication Directorby NAKIVO
AFFECTED< 11.0.0.88174SAFE ✓≥ 11.0.0.88174
Updated Aug 22, 2026View on NVD →
Detail

NAKIVO Backup and Replication Solution is a comprehensive data protection tool used primarily by IT professionals and system administrators. It is designed to back up and restore virtualized and physical environments across business and enterprise settings. Organizations rely on NAKIVO for its robust suite of backup and disaster recovery features. The software offers seamless integration with various platforms, making it a versatile choice for data management. Businesses find it invaluable for maintaining data resilience and ensuring uptime. Thanks to its comprehensive capabilities, NAKIVO plays a significant role in stringent business continuity strategies.

The vulnerability CVE-2024-48248 is an unauthenticated arbitrary file read flaw that arises due to insufficient input validation and missing authentication checks in the REST API. Attackers can exploit this by sending crafted HTTP requests to read any file on the server's filesystem. This type of vulnerability typically stems from insecure direct object references or path traversal issues in the code handling file retrieval operations.

Specifically, the vulnerable endpoint is the /api/rest/backup endpoint, where the 'file' parameter is not properly sanitized. An attacker can manipulate this parameter to traverse directories and read sensitive files such as configuration files, database credentials, or system logs. The lack of authentication means no valid session or token is required to trigger the exploit, making it accessible to any remote attacker.

If exploited, an attacker can exfiltrate critical data including encryption keys, backup configurations, and user credentials stored on the server. This could lead to further compromise of the backup infrastructure, data breaches, and potential ransomware attacks. The CVSS score of 7.5 highlights the high severity due to the ease of exploitation and potential for significant data exposure.

Solution Advice
  • Update NAKIVO Backup and Replication Solution to the latest patched version that addresses CVE-2024-48248.
  • Implement strict input validation and sanitization for all file path parameters in the REST API.
  • Enforce authentication and authorization checks on all API endpoints, especially those handling file operations.
  • Deploy a web application firewall (WAF) to block malicious requests targeting the vulnerable endpoint.
  • Restrict network access to the NAKIVO server using firewall rules to allow only trusted IPs.
  • Conduct regular security audits and penetration testing to identify and remediate similar vulnerabilities.
  • Monitor logs for unusual file read attempts and set up alerts for suspicious activity.
  • Apply the principle of least privilege to file system permissions, limiting what the application can access.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.