AOMEI Cyber Backup has a critical vulnerability that allows remote attackers to execute arbitrary code without authentication. This flaw exists in the DaoService service, which listens on TCP port 9074 by default. Attackers can exploit this vulnerability to run code in the context of SYSTEM, leading to severe security risks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-8611 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the DaoService service on TCP port 9074. Since no authentication is required, the attacker can gain access to critical functions and execute arbitrary code with SYSTEM privileges.
Affected Products
- AOMEI Cyber Backup: A backup solution that lacks proper authentication, allowing remote code execution.
Mitigation
To mitigate this vulnerability, it is recommended to restrict access to the DaoService service and implement proper authentication mechanisms. Additionally, users should apply any available patches or updates from AOMEI to secure their installations.