High · published October 31, 2025
⚡ An authenticated domain user can remotely execute code on the Backup Server – not a great party trick! Think of it like giving a trusted employee the master key to all the safes in a bank. They can access sensitive information and make changes without anyone noticing, which is quite the risk! This could allow a malicious user to run arbitrary code, leading to a full compromise of the server. Imagine an intruder sneaking in through the front door, accessing critical backups, modifying data, or even wiping everything clean. Absolutely devastating!
Think of it like giving a trusted employee the master key to all the safes in a bank. They can access sensitive information and make changes without anyone noticing, which is quite the risk! CVE-2025-48984 is a remote code execution vulnerability that arises when an authenticated domain user can execute commands on the Backup Server, leading to unauthorized actions and data manipulation.
This could allow a malicious user to run arbitrary code, leading to a full compromise of the server. Imagine an intruder sneaking in through the front door, accessing critical backups, modifying data, or even wiping everything clean. Absolutely devastating! Update the Backup Server to the latest patched version immediately. Implement strict user access controls and regularly review permissions to ensure only authorized users have access. 🛡️ You've got this! Follow these steps and you'll tighten security around your Backup Server in no time! 🔒
| Product | Versions | Fixed in |
|---|---|---|
| veeam/veeam_backup_\&_replication | ≥ 12.0.0.1402, < 12.3.2.4165 | 12.3.2.4165 |