CVE-2024-29851highCWE-294

CVE-2024-29851: high-severity vulnerability in Veeam Backup & Replication

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.9%
exploitation probability
0.9%top 41% of all CVEs
observed exploitation
nono source reports it
Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Veeam · Backup & Replication
Related CVEs — Veeam Backup & Replication

In the same product, most dangerous first.

CVE-2024-29849CRITICALCVE-2024-29849EPSS 38.4%CVE-2024-42455HIGHCVE-2024-42455EPSS 15.2%CVE-2024-29850HIGHCVE-2024-29850EPSS 0.8%CVE-2024-40717HIGHCVE-2024-40717EPSS 0.8%CVE-2024-29852LOWCVE-2024-29852EPSS 0.5%CVE-2024-42452HIGHCVE-2024-42452EPSS 0.5%
References
https://veeam.com/kb4581