Full Report
A critical path traversal vulnerability in Commvault’s backup and replication solutions has been reported
Analysis Summary
# Vulnerability: Critical Path Traversal Leading to RCE in Commvault Command Center
## CVE Details
- CVE ID: CVE-2025-34028
- CVSS Score: 10.0 (Critical)
- CWE: Improper limitation of a pathname to a restricted directory (Path Traversal)
## Affected Systems
- Products: Commvault Command Center Innovation Release
- Versions: Version 11.38 (Prior to patched versions)
- Configurations: Applicable on both Linux and Windows environments.
## Vulnerability Description
This critical vulnerability is a path traversal flaw within the Commvault Command Center web-based management interface. An unauthenticated attacker can exploit this flaw by uploading specially crafted ZIP files. Successful exploitation allows the attacker to perform Remote Code Execution (RCE) within the Command Center environment, leading to a complete compromise of the interface.
## Exploitation
- Status: Not explicitly stated as exploited in the wild, but the high severity suggests immediate attention is required.
- Complexity: Low (Implied by the ability for an unauthenticated actor to trigger RCE via file upload).
- Attack Vector: Network (Exploitable via the web interface)
## Impact
- Confidentiality: High (Potential access to sensitive data managed by the backup solution)
- Integrity: High (Ability to execute arbitrary code)
- Availability: High (Complete compromise of the management interface)
## Remediation
### Patches
- Commvault has released fixes in **Commvault Command Center Innovation Release version 11.38.20 and above**. Customers are urged to upgrade to these versions or newer releases immediately.
### Workarounds
- If installing the update is not immediately feasible, customers are advised to **isolate the Command Center installation from external network access**.
## Detection
- Detection methods specific to this RCE payload were not detailed in the summary.
- **General Indicators of Compromise (IoCs):** Monitor for unusual file uploads (specifically ZIP files) to the Command Center endpoint. Monitor for outbound connections indicative of reverse shells or command execution originating from the Commvault Command Center server process.
## References
- Vendor Advisory (Commvault): [Not provided in text, search for Commvault Security Bulletin related to CVE-2025-34028]
- Discovery Report: hxxps://www.infosecurity-magazine.com/news/critical-vulnerability-commvault/ (Original article source)