¡¾Îó²îͨ¸æ¡¿Veeam Backup & Replication 12 RCEÎó²î(CVE-2025-48984)

Ðû²¼Ê±¼ä 2025-10-16

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Veeam Backup & Replication 12 RCEÎó²î

CVE   ID

CVE-2025-48984

Îó²îÀàÐÍ

RCE

·¢Ã÷ʱ¼ä

2025-10-16

Îó²îÆÀ·Ö

9.9

Îó²îÆ·¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

µÍ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

²»ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


Veeam Backup & ReplicationÊÇÒ»¿îÆóÒµ¼¶±¸·ÝºÍÔÖÄѻָ´½â¾ö¼Æ»®£¬£¬£¬£¬Ö÷ÒªÓÃÓÚÐéÄ⻯ÇéÐÎÖеÄÊý¾Ý±£»£»£»£»£»£»£»¤¡£¡£¡£ ¡£¡£¡£ËüÖ§³ÖVMware vSphere¡¢Microsoft Hyper-VµÈÐéÄâÆ½Ì¨£¬£¬£¬£¬Ìṩ¸ßЧµÄ±¸·Ý¡¢»Ö¸´¡¢¸´ÖƼ°¼à¿Ø¹¦Ð§¡£¡£¡£ ¡£¡£¡£VeeamÄܹ»¾ÙÐм´Ê±»Ö¸´¡¢ÔÖÄѻָ´ºÍÔÆ±¸·Ý£¬£¬£¬£¬×ÊÖúÆóҵȷ±£Êý¾ÝÇå¾²¡¢ÓªÒµÒ»Á¬ÐԺͿìËÙ»Ö¸´¡£¡£¡£ ¡£¡£¡£¸ÃÈí¼þ¾ßÓÐÇáÓ¯µÄÖÎÀí½çÃæ¡¢ÎÞаµÄ´æ´¢Ñ¡ÏîºÍǿʢµÄ×Ô¶¯»¯¹¦Ð§£¬£¬£¬£¬ÊÊÓÃÓÚÖÖÖÖ¹æÄ£µÄÆóÒµ¡£¡£¡£ ¡£¡£¡£


2025Äê10ÔÂ16ÈÕ£¬£¬£¬£¬°ÙÀÖ²©¼¯ÍÅVSRC¼à²âµ½Veeam Backup & Replication v12ÖеÄÒ»¸ö¸ßΣԶ³Ì´úÂëÖ´ÐУ¨RCE£©Îó²î£¬£¬£¬£¬¸ÃÎó²î½öÓ°ÏìÒѼÓÈëÓòµÄ±¸·ÝЧÀÍÆ÷£¬£¬£¬£¬¹¥»÷Õß¿ÉÒÔͨ¹ýÍøÂçÔ¶³ÌÖ´ÐÐí§Òâ´úÂ룬£¬£¬£¬´Ó¶ø¿ÉÄÜÍêÈ«¿ØÖÆÊÜÓ°ÏìµÄ±¸·Ýϵͳ¡£¡£¡£ ¡£¡£¡£Îó²îµÄ»ù´¡Ôµ¹ÊÔ­ÓÉÔÚÓÚЧÀÍÆ÷¶Ë¶ÔÓû§ÊäÈë´¦Öóͷ£²»µ±£¬£¬£¬£¬ÔÊÐíδ¾­ÊÚȨµÄÏÂÁîÒÔ±¸·ÝЧÀÍÆ÷µÄȨÏÞÖ´ÐУ¬£¬£¬£¬Îó²îÆÀ·Ö9.9·Ö£¬£¬£¬£¬Îó²î¼¶±ðÑÏÖØ¡£¡£¡£ ¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Veeam Backup & Replication <= 12.3.2.3617


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


veeam¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡£¬£¬£¬£¬ÒÔÐÞ¸´¸ÃÎó²î¡£¡£¡£ ¡£¡£¡£
Veeam Backup & Replication > 12.3.2.3617


ÏÂÔØÁ´½Ó£ºhttps://www.veeam.com/kb4696/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£ ¡£¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬ïÔ̭ϵͳÎó²î£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£ ¡£¡£¡£
ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£ ¡£¡£¡£
ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£ ¡£¡£¡£
ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£ ¡£¡£¡£

ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£ ¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://www.veeam.com/kb4771/
https://www.veeam.com/kb4696/