CVE-2024-42448

CVE-2024-42448 affects Veeam Service Provider Console (VSPC). From the VSPC management agent machine, when the agent is authorized on the server, an attacker can achieve Remote Code Execution (RCE) on the VSPC server. The CVSS v3.0 base score is 9.9 (CRITICAL) with Network attack vector, Low atta...

CVE-2024-42448

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution RCE on the VSPC server machine...

Exploit for CVE-2024-42448

CVE-2024-42448-RCE Veeam Service Provider Console VSPC rem...

Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console

Veeam has released security updates to address a critical flaw impacting Service Provider Console VSPC that could pave the way for remote code execution on susceptible instances. The vulnerability, tracked as CVE-2024-42448, carries a CVSS score of 9.9 out of a maximum of 10.0. The company noted...

CVE-2024-42448

creationtimestamp| type| source ---|---|--- 2024-12-03 21:45:08+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113591078514826699 2024-12-04 04:34:00+00:00| seen| https://thehackernews.com/2024/12/veeam-issues-patch-for-critical-rce.html 2024-12-04 06:37:00+00:00| seen|...