CVE-2023-27532

🗓️ 10 Mar 2023 00:00:00Reported by hackeroneType

Veeam Backup vulnerability, encrypted credentials exposur

Reporter	Title	Published	Views	Family All 45
GithubExploit	Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication	26 Nov 202516:37	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication	18 Mar 202316:20	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication	5 Jul 202414:00	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication	23 Mar 202316:08	–	githubexploit
ATTACKERKB	CVE-2023-27532	10 Mar 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the executable file Veeam.Backup.Service.exe allows a hacker to gain unauthorized access to systems that use Veeam Backup & Replication for cloud, virtual, and physical systems protection.	24 Mar 202300:00	–	bdu_fstec
Circl	CVE-2023-27532	10 Mar 202307:02	–	circl
CISA KEV Catalog	Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability	22 Aug 202300:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	22 Aug 202312:00	–	cisa
CNNVD	Veeam Backup & Replication 访问控制错误漏洞	10 Mar 202300:00	–	cnnvd

[
  {
    "vendor": "n/a",
    "product": "Veeam Backup & Replication",
    "versions": [
      {
        "version": "Fixed Versions: v12 (build 12.0.0.1420 P20230223)",
        "status": "affected"
      },
      {
        "version": "11a (build 11.0.1.1261 P20230227)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
veeam	www.veeam.com/kb4424

10 Mar 2023 00:00Current

7.5High risk

Vulners AI Score7.5

EPSS0.7761

CWE-306