Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Veeam Backup & Replication ausnutzen, um beliebigen Programmcode auszuführen oder seine Privilegien zu erweitern.
Product
Veeam Backup & Replication ist eine Datensicherungslösung für VMware vSphere- und Microsoft Hyper-V-Umgebungen.
Vulnerabilities 4
-
Critical 9.8CVE-2022-26501 Exploited · Ransomware
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
KEV Dec 13, 2022 -
High 8.8CVE-2022-26500 Exploited · Ransomware
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated…
KEV Dec 13, 2022 -
Unscored —CVE-2022-26503 Public exploit
Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to r…
-
Unscored —
Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Ce…
Revision history
-
#2
Exploit aufgenommen
-
#1
Initiale Fassung
References
-
CISA Known Exploited Vulnerabilities Catalog vom 2022-12-14
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
-
Veeam Security Advisory vom 2022-03-13
https://www.veeam.com/kb4245
-
Veeam Security Advisory vom 2022-03-13
https://www.veeam.com/kb4288
-
Veeam Security Advisory vom 2022-03-13
https://www.veeam.com/kb4290
-
Veeam Security Advisory vom 2022-03-13
https://www.veeam.com/kb4289