¡¾Îó²îͨ¸æ¡¿Veeam Backup & Replication 12 RCEÎó²î(CVE-2025-48984)

Ðû²¼Ê±¼ä 2025-10-16

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Veeam Backup & Replication 12 RCEÎó²î

CVE   ID

CVE-2025-48984

Îó²îÀàÐÍ

RCE

·¢Ã÷ʱ¼ä

2025-10-16

Îó²îÆÀ·Ö

9.9

Îó²îÆ·¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

µÍ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

²»ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


Veeam Backup & ReplicationÊÇÒ»¿îÆóÒµ¼¶±¸·ÝºÍÔÖÄѻָ´½â¾ö¼Æ»®£¬£¬£¬£¬£¬£¬ £¬Ö÷ÒªÓÃÓÚÐéÄ⻯ÇéÐÎÖеÄÊý¾Ý±£»£»£»¤¡£ ¡£¡£ËüÖ§³ÖVMware vSphere¡¢Microsoft Hyper-VµÈÐéÄâƽ̨£¬£¬£¬£¬£¬£¬ £¬Ìṩ¸ßЧµÄ±¸·Ý¡¢»Ö¸´¡¢¸´ÖƼ°¼à¿Ø¹¦Ð§¡£ ¡£¡£VeeamÄܹ»¾ÙÐм´Ê±»Ö¸´¡¢ÔÖÄѻָ´ºÍÔƱ¸·Ý£¬£¬£¬£¬£¬£¬ £¬×ÊÖúÆóҵȷ±£Êý¾ÝÇå¾²¡¢ÓªÒµÒ»Á¬ÐԺͿìËÙ»Ö¸´¡£ ¡£¡£¸ÃÈí¼þ¾ßÓÐÇáÓ¯µÄÖÎÀí½çÃæ¡¢ÎÞаµÄ´æ´¢Ñ¡ÏîºÍÇ¿Ê¢µÄ×Ô¶¯»¯¹¦Ð§£¬£¬£¬£¬£¬£¬ £¬ÊÊÓÃÓÚÖÖÖÖ¹æÄ£µÄÆóÒµ¡£ ¡£¡£


2025Äê10ÔÂ16ÈÕ£¬£¬£¬£¬£¬£¬ £¬918²©ÌìÌü¯ÍÅVSRC¼à²âµ½Veeam Backup & Replication v12ÖеÄÒ»¸ö¸ßΣԶ³Ì´úÂëÖ´ÐУ¨RCE£©Îó²î£¬£¬£¬£¬£¬£¬ £¬¸ÃÎó²î½öÓ°ÏìÒѼÓÈëÓòµÄ±¸·ÝЧÀÍÆ÷£¬£¬£¬£¬£¬£¬ £¬¹¥»÷Õß¿ÉÒÔͨ¹ýÍøÂçÔ¶³ÌÖ´ÐÐí§Òâ´úÂ룬£¬£¬£¬£¬£¬ £¬´Ó¶ø¿ÉÄÜÍêÈ«¿ØÖÆÊÜÓ°ÏìµÄ±¸·Ýϵͳ¡£ ¡£¡£Îó²îµÄ»ù´¡Ôµ¹ÊÔ­ÓÉÔÚÓÚЧÀÍÆ÷¶Ë¶ÔÓû§ÊäÈë´¦Öóͷ£²»µ±£¬£¬£¬£¬£¬£¬ £¬ÔÊÐíδ¾­ÊÚȨµÄÏÂÁîÒÔ±¸·ÝЧÀÍÆ÷µÄȨÏÞÖ´ÐУ¬£¬£¬£¬£¬£¬ £¬Îó²îÆÀ·Ö9.9·Ö£¬£¬£¬£¬£¬£¬ £¬Îó²î¼¶±ðÑÏÖØ¡£ ¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Veeam Backup & Replication <= 12.3.2.3617


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


veeam¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡£¬£¬£¬£¬£¬£¬ £¬ÒÔÐÞ¸´¸ÃÎó²î¡£ ¡£¡£
Veeam Backup & Replication > 12.3.2.3617


ÏÂÔØÁ´½Ó£ºhttps://www.veeam.com/kb4696/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£ ¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬£¬£¬ £¬ïÔ̭ϵͳÎó²î£¬£¬£¬£¬£¬£¬ £¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£ ¡£¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬£¬£¬ £¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬£¬£¬ £¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬£¬£¬ £¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬£¬£¬ £¬ïÔÌ­¹¥»÷Ãæ¡£ ¡£¡£
? Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬£¬£¬ £¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£ ¡£¡£
? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬£¬£¬ £¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬£¬£¬£¬£¬£¬ £¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£ ¡£¡£

? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£ ¡£¡£


3.4 ²Î¿¼Á´½Ó


https://www.veeam.com/kb4771/
https://www.veeam.com/kb4696/