¡¾·ì϶¹«¸æ¡¿Veeam Backup & Replication 12 RCE·ì϶(CVE-2025-48984)

°ä²¼¹¦·ò 2025-10-16

Ò»¡¢·ì϶¸ÅÊö


·ìϼûû³Æ

Veeam Backup & Replication 12 RCE·ì϶

CVE   ID

CVE-2025-48984

·ì϶ÀàÐÍ

RCE

·¢ÏÖ¹¦·ò

2025-10-16

·ì϶ÆÀ·Ö

9.9

·ì϶µÈ¼¶

ÑϳÁ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

µÍ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

²»±ØÒª

PoC/EXP

δ¹«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


Veeam Backup & ReplicationÊÇÒ»¿îÆóÒµ¼¶±¸·ÝºÍ¿àÄѸ´Ô­½â¾ö¹æ»®£¬£¬£¬£¬£¬£¬ÖØÒªÓÃÓÚÐé¹¹»¯»·¾³ÖеÄÊý¾Ý±£» £»£»£»£»£» £»¤¡£¡£¡£¡£¡£¡£¡£ËüÖ§³ÖVMware vSphere¡¢Microsoft Hyper-VµÈÐ鹹ƽ̨£¬£¬£¬£¬£¬£¬Ìṩ¸ßЧµÄ±¸·Ý¡¢¸´Ô­¡¢¸´Ôì¼°¼à¿ØÖ°ÄÜ¡£¡£¡£¡£¡£¡£¡£Veeam¿ÉÄܽøÐм´Ê±¸´Ô­¡¢¿àÄѸ´Ô­ºÍÔÆ±¸·Ý£¬£¬£¬£¬£¬£¬Ô®ÊÔìóҵȷ±£Êý¾Ý°²È«¡¢ÒµÎñÂ½ÐøÐԺͼ±¾ç¸´Ô­¡£¡£¡£¡£¡£¡£¡£¸ÃÈí¼þÓµÓÐÇá±ãµÄÖÎÀí½çÃæ¡¢½Ã½ÝµÄ´æ´¢Ñ¡ÏîºÍ׳´óµÄ×Ô¶¯»¯Ö°ÄÜ£¬£¬£¬£¬£¬£¬ºÏÓÃÓÚ¸÷Àà¹æÄ£µÄÆóÒµ¡£¡£¡£¡£¡£¡£¡£


2025Äê10ÔÂ16ÈÕ£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯Íż¯ÍÅVSRC¼à²âµ½Veeam Backup & Replication v12ÖеÄÒ»¸ö¸ßΣԶ³Ì´úÂëÖ´ÐУ¨RCE£©·ì϶£¬£¬£¬£¬£¬£¬¸Ã·ì϶½öÓ°ÏìÒѲÎÓëÓòµÄ±¸·Ý·þÎñÆ÷£¬£¬£¬£¬£¬£¬¹¥»÷ÕßÄܹ»Í¨¹ýÍøÂçÔ¶³ÌÖ´ÐÐËÁÒâ´úÂ룬£¬£¬£¬£¬£¬´Ó¶ø¿ÉÄÜÆëÈ«½ÚÔìÊÜÓ°ÏìµÄ±¸·Ýϵͳ¡£¡£¡£¡£¡£¡£¡£·ì϶µÄµ××ÓÔ­ÒòÔÚÓÚ·þÎñÆ÷¶Ë¶ÔÓû§ÊäÈë´¦Öò»µ±£¬£¬£¬£¬£¬£¬ÔÊÐíδ¾­ÊÚȨµÄºÅÁîÒÔ±¸·Ý·þÎñÆ÷µÄȨÏÞÖ´ÐУ¬£¬£¬£¬£¬£¬·ì϶ÆÀ·Ö9.9·Ö£¬£¬£¬£¬£¬£¬·ì϶¼¶±ðÑϳÁ¡£¡£¡£¡£¡£¡£¡£


¶þ¡¢Ó°ÏìÁìÓò


Veeam Backup & Replication <= 12.3.2.3617


Èý¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


veeam¹Ù·½ÒѰ䲼½¨¸´²¹¶¡£¬£¬£¬£¬£¬£¬ÒÔ½¨¸´¸Ã·ì϶¡£¡£¡£¡£¡£¡£¡£
Veeam Backup & Replication > 12.3.2.3617


ÏÂÔØÁ´½Ó£ºhttps://www.veeam.com/kb4696/


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£¡£¡£¡£¡£¡£¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬£¬£¬Ï÷¼õϵͳ·ì϶£¬£¬£¬£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£¡£¡£¡£
¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔ죬£¬£¬£¬£¬£¬Åú¸Ä·À»ðǽսÊõ£¬£¬£¬£¬£¬£¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬£¬£¬£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬£¬£¬£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£¡£¡£¡£
ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬£¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£¡£¡£¡£
¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò£¬£¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£¡£¡£¡£¡£

ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://www.veeam.com/kb4771/
https://www.veeam.com/kb4696/