Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication

🗓️ 15 Sep 2024 17:25:32Reported by watchtowrlabsType

Exploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711. Found by Florian Hauser, recreated by Sina Kheirkhah at watchTowr. Allows unauthenticated RCE in Veeam version 12.1.1.56 and earlier

Reporter	Title	Published	Views	Family All 33
ATTACKERKB	CVE-2024-40711	7 Sep 202400:00	–	attackerkb
Information Security Automation	Veeam B&R RCE vulnerability CVE-2024-40711 is exploited in attacks	13 Oct 202409:41	–	avleonov
Information Security Automation	September episode of “In The Trend of VM”: 7 CVEs, fake reCAPTCHA, lebanese pagers, VM and IT annual bonuses	21 Oct 202413:01	–	avleonov
BDU FSTEC	The vulnerability of Veeam Backup & Replication’s protection mechanisms for cloud, virtual, and physical systems stems from errors in privilege management, allowing attackers to execute arbitrary code.	6 Sep 202400:00	–	bdu_fstec
GithubExploit	Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication	23 Nov 202404:02	–	githubexploit
Circl	CVE-2024-40711	5 Sep 202407:08	–	circl
CISA KEV Catalog	Veeam Backup and Replication Deserialization Vulnerability	17 Oct 202400:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	17 Oct 202412:00	–	cisa
CNNVD	Veeam Backup & Replication 安全漏洞	7 Sep 202400:00	–	cnnvd
CVE	CVE-2024-40711	7 Sep 202416:11	–	cve