CVE-2025-8611
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-20

Last updated on: 2025-08-22

Assigner: Zero Day Initiative

Description
AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DaoService service, which listens on TCP port 9074 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-26158.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-20
Last Modified
2025-08-22
Generated
2026-05-07
AI Q&A
2025-08-20
EPSS Evaluated
2026-05-05
NVD
CVE-2025-8611
EUVD
EUVD-2025-25388
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
aomeitech cyber_backup 3.7.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in AOMEI Cyber Backup's DaoService, which listens on TCP port 9074. It allows remote attackers to execute arbitrary code without any authentication, meaning no credentials are needed to exploit it. The attacker can run code with SYSTEM-level privileges, giving them full control over the affected system.


How can this vulnerability impact me? :

An attacker exploiting this vulnerability can execute arbitrary code with SYSTEM privileges remotely, potentially leading to full system compromise. This can result in unauthorized access, data theft, data loss, disruption of services, or installation of malicious software.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart