CVE-2025-48501

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.

Score

CVSS 3.0 9.8 Critical

Status

Deferred - vultures@jpcert.or.jp

Published

2025-07-07

Last modified

2025-07-07

Weaknesses

CWE-78

Affected products

• Nimesa Backup And Recovery (Nimesa)

References

• https://aws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2c
• https://jvn.jp/en/jp/JVN88251376/