{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-48501","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","state":"PUBLISHED","assignerShortName":"jpcert","dateReserved":"2025-07-02T08:23:23.992Z","datePublished":"2025-07-07T04:51:39.574Z","dateUpdated":"2025-07-07T17:51:06.538Z"},"containers":{"cna":{"affected":[{"vendor":"Nimesa","product":"Nimesa Backup and Recovery","versions":[{"version":"v2.3","status":"affected"}]},{"vendor":"Nimesa","product":"Nimesa Backup and Recovery","versions":[{"version":"v2.4","status":"affected"}]}],"descriptions":[{"lang":"en","value":"An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running."}],"problemTypes":[{"descriptions":[{"description":"Improper neutralization of special elements used in an OS command ('OS Command Injection')","lang":"en-US","cweId":"CWE-78","type":"CWE"}]}],"references":[{"url":"https://aws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2c"},{"url":"https://jvn.jp/en/jp/JVN88251376/"}],"tags":["unsupported-when-assigned"],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"CRITICAL","baseScore":9.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"providerMetadata":{"orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert","dateUpdated":"2025-07-07T04:51:39.574Z"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-07T17:50:54.621360Z","id":"CVE-2025-48501","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-07-07T17:51:06.538Z"}}]}}