CVE-2020-10915

CVE-2020-10915 affects VEEAM ONE Agent (version around 9.5.4.4587). The root cause is deserialization of untrusted data in the HandshakeResult method, allowing an unauthenticated attacker to execute code with the service account’s privileges via a network exploit. Public materials reference pre-a...

Veeam One Agent Code Issue Vulnerability

Veeam One Agent is a data protection and disaster recovery solution for physical and virtual machines from Veeam Switzerland. A code issue vulnerability exists in the HandshakeResult method in Veeam One Agent version 9.5.4.4587, which stems from the program failing to properly validate...