Vulnerabilities fixed in Veeam Backup & Replication

🗓️ 06 Dec 2024 11:47:19Reported by NCSCType

Veeam fixes vulnerabilities enabling remote code execution, credential exposure, server mode agent start, and configuration manipulation.

Reporter	Title	Published	Views	Family All 85
BDU FSTEC	The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in its ability to allow unauthorized access to read, modify, or delete data stored in memory. This vulnerability enables attackers to gain unauthorized access to these data.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Veeam Backup Enterprise Manager management service, a component of Veeam Backup & Replication, which protects cloud-based, virtual, and physical systems, allows attackers to escalate their privileges and cause service interruptions.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the remote management interface of the Veeam Backup & Replication software for cloud, virtual, and physical systems allows a perpetrator to disclose protected information.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in the fact that confidential information is stored in an open manner, allowing attackers to disclose the protected data.	18 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-40717	3 Dec 202418:19	–	circl
Circl	CVE-2024-42451	3 Dec 202418:19	–	circl
Circl	CVE-2024-42452	3 Dec 202418:19	–	circl
Circl	CVE-2024-42453	3 Dec 202418:19	–	circl
Circl	CVE-2024-42455	3 Dec 202418:19	–	circl