PT-2022-08: Deserialization of untrusted data in Veeam Agent for Microsoft Windows

The vulnerability was identified in Veeam Agent for Windows versions 2.0, 2.1, 2.2, 3.0.2, 4.0, and 5.0. The discovered vulnerability allows local users to run arbitrary code with LOCAL SYSTEM privileges. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 12.03.2022...

PT-2022-07: Insufficient authentication in Veeam Backup & Replication

The vulnerability was identified in Veeam Backup & Replication versions 9.5, 10, 11. The discovered vulnerability allows an attaker to authenticate using a NULL-session. This may lead to gaining control over the target system. Vulnerability status: Confirmed by vendor Date of vulnerability...