CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on April 1, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-091-01 Rockwell Automation Lifecycle Services with Veeam Backup and Replication...

Rockwell Automation Lifecycle Services with Veeam Backup and Replication

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with administrative privileges to execute code on the target system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

Support Statement - Microsoft's Retirement of Basic SKU Public IP Addresses

Challenge Due to Microsoft's deprecation of Basic SKU Public IP addresses, starting on March 31st, 2025, the following product features that utilize the Basic SKU Public IP address will be impacted: Veeam Backup & Replication The Archiver Appliance used by an Object Storage Repository for Microso...

About Remote Code Execution – Veeam Backup & Replication (CVE-2025-23120) vulnerability

About Remote Code Execution - Veeam Backup & Replication CVE-2025-23120 vulnerability. Veeam B&R is a client-server software solution for centralized backup of virtual machines in VMware vSphere and Microsoft Hyper-V environments. A deserialization flaw CWE-502 lets an attacker run arbitrary code...

Windows 11 24H2 | Server 2025 - Recovery Media Issue

Issue Resolved in May 13 2025 Windows Update KB5058411 The underlying issue causing recovery media to have the problems documented in this article was resolved in Microsoft Update KB5058411 for Windows 11 and Server 2025. After applying the update, the recovery media must be recreated. Challenge...

"SharePoint Server backup is not configured for this organization."

Challenge A SharePoint backup job in Veeam Data Cloud for Microsoft 365 fails with the following error: SharePoint Server backup is not configured for this organization. Note: This error occurs despite SharePoint being correctly configured in Microsoft 365. Cause The issue occurs for specific...

The vulnerability of components Veeam.Backup.Core.BackupSummary and Veeam.Backup.EsxManager.xmlFrameworkDs of the cloud, virtual, and physical system protection software Veeam Backup & Replication allows a attacker to execute arbitrary code.

The vulnerabilities of the Veeam.Backup.Core.BackupSummary component and the Veeam.Backup.EsxManager.xmlFrameworkDs components of the cloud, virtual, and physical system protection solutions from Veeam Backup & Replication are related to deserialization mechanism flaws. Exploiting these...

Vulnerability fixed in Veeam Backup & Replication

Veeam has fixed a vulnerability in Veeam Backup & Replication. The vulnerability is located in the authorization mechanism of the Backup & Replication software and allows a domain user to execute arbitrary code on the system where Backup & Replication is implemented. Veeam has released critical...

Veeam and IBM Release Patches for High-Risk Flaws in Backup and AIX Systems

Veeam has released security updates to address a critical security flaw impacting its Backup & Replication software that could lead to remote code execution. The vulnerability, tracked as CVE-2025-23120 , carries a CVSS score of 9.9 out of 10.0. It affects 12.3.0.310 and all earlier version 12...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication that originates from allowing remote code execution...

Veeam Backup and Replication 12.x < 12.3.1.1139 Authenticated RCE (March 2025) (KB4724)

The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.1.1139. It is, therefore, affected by an authenticated remote code execution vulnerability: - A vulnerability allowing remote code execution RCE by authenticated domain users. Note: This...

Veeam Backup & Replication Update "Setup has detected inconsistent configuration"

Regarding Veeam Recovery Orchestrator 7.2 The Veeam Backup & Replication 12.3.2 updater ISO can be used to update the Veeam Backup & Replication 12.3 deployment embedded within Veeam Recovery Orchestrator 7.2. However , before installing the update, you must manually install the Microsoft Entra I...

Critical Veeam Backup & Replication CVE-2025-23120

Update Friday, March 28, 2025:Security researchers at CODE WHITE GmbH have noted on social media that it is possible to bypass the patch for CVE-2025-23120. Rapid7 has not directly confirmed the patch bypass, but we are relatively confident in the validity of the finding. Customers should ensure...

Critical Veeam Backup & Replication CVE-2025-23120

Update Friday, March 28, 2025: Security researchers at CODE WHITE GmbH have noted on social media that it is possible to bypass the patch for CVE-2025-23120. Rapid7 has not directly confirmed the patch bypass, but we are relatively confident in the validity of the finding. Customers should ensure...

Error: "Cannot find the object on the mount host."

Challenge When attempting to perform a Guest Files restore from Veeam Backup Enterprise Manager, the restore fails with the error: Cannot find the object on the mount host. Read KB4722 for more details. Cause This error occurs when the Guest OS partition that is being mounted is formatted with a...

CVE-2025-23120

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

PT-2025-11958

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions prior to 12.3.1 Description A deserialization flaw exists in Veeam Backup & Replication, where the application improperly handles serialized data. This allows an authenticated domain user or a member of the...

The vulnerability of Veeam Backup’s backup for virtual machines deployed in Microsoft Azure allows a attacker to perform an SSRF attack.

The vulnerability of Veeam Backup’s backup for virtual machines deployed in Microsoft Azure cloud environments is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Veeam My Account Portal - MFA Guide

Veeam Data Cloud MFA Requirements As of July 7, 2026, logging in to Veeam Data Cloud cloud.veeam.com using the Continue with Veeam authentication option now requires that your Veeam Account have Multi-Factor Authentication MFA enabled. If you use the Continue with Microsoft authentication option,...

Release Information for Proxmox Virtual Environment Plug-In v12.1.3.217

Update: 2025-03-19 Consider the following regarding the Proxmox Virtual Environment Plug-In: The Plug-in build on this page, 12.1.3.217, is included automatically when upgrading to or installing Veeam Backup & Replication 12.3.1. The Plug-in only needs to be manually deployed by customers still...