Summary
Ein Angreifer kann mehrere Schwachstellen in Veeam Backup & Replication ausnutzen, um Dateien zu manipulieren, erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen preiszugeben.
Product
Veeam Backup & Replication ist eine Datensicherungslösung für VMware vSphere- und Microsoft Hyper-V-Umgebungen.
Vulnerabilities 6
-
Critical 9.8
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code exe…
KEV Oct 17, 2024 -
High 8.8
A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service…
-
High 8.3
An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network t…
-
High 8.1
An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system wit…
-
High 7.8
A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perfo…
-
High 7.8
A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alt…
Revision history
-
#2
Aktive Ausnutzung gemeldet
-
#1
Initiale Fassung
References
-
Veeam Security Bulletin September 2024 vom 2024-09-04
https://www.veeam.com/kb4649
-
Known Exploited Vulnerabilities Catalog vom 2024-09-04
https://www.cisa.gov/news-events/alerts/2024/10/17/cisa-adds-one-known-exploited-vulnerability-catalog