CVE-2025-48983

Published Oct 31, 2025

Last updated a month ago

Veeam Backup & Replication

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-48983 is a vulnerability in the Mount service of Veeam Backup & Replication that allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user. This vulnerability affects domain-joined Veeam Backup & Replication v12 backup infrastructure servers. It impacts all version 12 builds up to 12.3.2.3617. The vulnerability can be exploited by an authenticated domain user to execute arbitrary code remotely. The issue was reported by CODE WHITE. The vulnerability has been resolved in the latest build Veeam Backup & Replication 12.3.2.4165 Patch. The Veeam Software Appliance and the upcoming Backup & Replication v13 are architecturally not impacted by this vulnerability.

Description: A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.
Source: support@hackerone.com
NVD status: Analyzed
Products: veeam_backup_\&_replication

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.9
Impact score: 6
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:veeam:veeam_backup_\\&_replication:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ABA6D012-0B73-4D37-B42E-1BAE5E4A4221",
            "versionEndExcluding": "12.3.2.4165",
            "versionStartIncluding": "12.0.0.1402"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.