Paper/Archive/CVE-2025-48501

CVE-2025-48501

Nimesa Nimesa Backup and Recovery — An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4.

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 70.7.707 × 2014.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.

Affected

ProductAffectedFixed inSource

Nimesa Backup and Recoveryv2.3–CNA

Nimesa Backup and Recoveryv2.4–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refaws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2c refjvn.jp/en/jp/JVN88251376