Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

🗓️ 05 Sep 2024 16:05:00Reported by The Hacker NewsType

Veeam fixes 18 flaws, 5 critica

Reporter	Title	Published	Views	Family All 77
ATTACKERKB	CVE-2024-40711	7 Sep 202400:00	–	attackerkb
Information Security Automation	Veeam B&R RCE vulnerability CVE-2024-40711 is exploited in attacks	13 Oct 202409:41	–	avleonov
Information Security Automation	September episode of “In The Trend of VM”: 7 CVEs, fake reCAPTCHA, lebanese pagers, VM and IT annual bonuses	21 Oct 202413:01	–	avleonov
BDU FSTEC	The vulnerability of Veeam Backup & Replication’s protection mechanisms for cloud, virtual, and physical systems stems from errors in privilege management, allowing attackers to execute arbitrary code.	6 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the file loading function of the backup and recovery software for remote and cloud-based Veeam Service Provider Console (VSPC) customers allows a hacker to execute arbitrary code on the VSPC server.	9 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Veeam ONE monitoring software, related to deficiencies in access control, allows a perpetrator to execute arbitrary code on systems where the Veeam ONE Agent is installed.	9 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Console (VSPC) users allows a hacker to bypass authentication procedures and gain unauthorized access to protected information.	20 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Veeam Reporter Service, a monitoring tool for IT infrastructure, allows a hacker to disclose protected information.	30 Sep 202400:00	–	bdu_fstec
GithubExploit	Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication	23 Nov 202404:02	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication	15 Sep 202417:25	–	githubexploit