CVE-2024-29849criticalCWE-287

CVE-2024-29849: critical vulnerability in Veeam Backup & Replication

Published · Updated

Follow this CVE+ Monitor Backup & Replication

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

62Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.8epss 39%
from disclosure to weapon19 days
Published on NVDMay 22
1st PoC+19d
In short

An attacker can log into Veeam Backup Enterprise Manager as any user without needing a password or credentials. This is critical because it gives unauthorized access to backup systems that protect important company data.

Technical detail

An unauthenticated attacker can bypass authentication mechanisms (CWE-287) in the Enterprise Manager web interface to assume the identity of any legitimate user. This requires network access to the web interface and allows complete compromise of backup management functionality, including data access and system configuration.

Summary generated and translated by AI from the official description.
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Veeam · Backup & Replication
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Veeam Backup & Replication

In the same product, most dangerous first.

CVE-2024-42455HIGHCVE-2024-42455EPSS 15.8%CVE-2024-29851HIGHCVE-2024-29851EPSS 0.9%CVE-2024-29850HIGHCVE-2024-29850EPSS 0.8%CVE-2024-40717HIGHCVE-2024-40717EPSS 0.8%CVE-2024-29852LOWCVE-2024-29852EPSS 0.5%CVE-2024-42452HIGHCVE-2024-42452EPSS 0.5%