CVE-2024-42024criticalCWE-250

CVE-2024-42024: critical vulnerability in Veeam One

Published · Updated

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 1.3%
exploitation probability
1.3%top 31% of all CVEs
observed exploitation
nono source reports it
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Veeam · One
Related CVEs — Veeam One

In the same product, most dangerous first.

CVE-2023-38549MEDIUMCVE-2023-38549EPSS 19.1%CVE-2023-38547CRITICALCVE-2023-38547EPSS 18.9%CVE-2023-41723MEDIUMCVE-2023-41723EPSS 12.3%CVE-2023-38548CRITICALCVE-2023-38548EPSS 11.8%CVE-2024-42019CRITICALCVE-2024-42019EPSS 0.5%CVE-2026-65641CRITICALCVE-2026-65641EPSS 0.5%
References
https://www.veeam.com/kb4649