AOMEI Cyber Backup has a critical vulnerability that allows remote attackers to execute arbitrary code without authentication. This flaw exists in the StorageNode service, which listens on TCP port 9075 by default. Attackers can exploit this vulnerability to run code in the context of SYSTEM, leading to severe security risks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-8610 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the StorageNode service on TCP port 9075. Since no authentication is required, the attacker can gain access to critical functions and execute arbitrary code with SYSTEM privileges.
Affected Products
- AOMEI Cyber Backup: A backup solution that lacks proper authentication mechanisms, making it vulnerable to remote code execution.
Mitigation
To mitigate this vulnerability, it is recommended to restrict access to the StorageNode service and implement proper authentication mechanisms. Additionally, users should apply any available patches or updates from AOMEI to secure their installations.