CVE-2024-42448

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution RCE on the VSPC server machine...

CVE-2024-42448

The Veeam Service Provider Console (VSPC) is affected by a critical Remote Code Execution (RCE) vulnerability (CVSS 9.9) caused by errors in privilege management. If a management agent is authorized on the server, an attacker can execute arbitrary code on the VSPC server machine. This flaw impact...

Exploit for CVE-2024-42448

CVE-2024-42448-RCE Veeam Service Provider Console VSPC rem...

Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console

Veeam has released security updates to address a critical flaw impacting Service Provider Console VSPC that could pave the way for remote code execution on susceptible instances. The vulnerability, tracked as CVE-2024-42448, carries a CVSS score of 9.9 out of a maximum of 10.0. The company noted...

CVE-2024-42448

creationtimestamp| type| source ---|---|--- 2024-12-03 21:45:08+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113591078514826699 2024-12-04 04:34:00+00:00| seen| https://thehackernews.com/2024/12/veeam-issues-patch-for-critical-rce.html 2024-12-04 06:37:00+00:00| seen|...