High WID-SEC-2025-1342 3 CVEs

Veeam Backup & Replication: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jun 17, 2025 · Updated Jul 21, 2025 · Revision 2 · de-DE

Vendor: Veeam Product: Backup & Replication

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Veeam Backup & Replication ausnutzen, um beliebigen Programmcode auszuführen.

Product

Veeam Backup & Replication ist eine Datensicherungslösung für VMware vSphere- und Microsoft Hyper-V-Umgebungen.

Vulnerabilities 3

Critical 9.9

CVE-2025-23121 EPSS 26%

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user

Veeam Backup and Recovery

Jun 18, 2025
High 7.2

CVE-2025-24286 EPSS 19%

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute…

Veeam Backup and Recovery

Jun 18, 2025
Medium 6.1

CVE-2025-24287

A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the …

Veeam Backup for Microsoft Windows Windows

Jun 18, 2025

Revision history

2025-07-21 #2
Referenz(en) aufgenommen: ZDI-25-625, ZDI-CAN-26062
2025-06-17 #1
Initiale Fassung

References

Veeam Security Advisory vom 2025-06-17
https://www.veeam.com/kb4743