CVE-2024-42452highCWE-863

CVE-2024-42452: falha de alta gravidade em Veeam Backup & Replication

Publicada em

Seguir esta CVE+ Monitorar Backup & Replication

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.5%
A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability exists because remote calls bypass permission checks, leading to full system compromise.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Veeam · Backup & Replication
CVEs relacionadas — Veeam Backup & Replication

No mesmo produto, das mais perigosas para as menos.

CVE-2024-29849CRITICALCVE-2024-29849EPSS 38.7%CVE-2024-42455HIGHCVE-2024-42455EPSS 15.8%CVE-2024-29851HIGHCVE-2024-29851EPSS 0.9%CVE-2024-29850HIGHCVE-2024-29850EPSS 0.8%CVE-2024-40717HIGHCVE-2024-40717EPSS 0.8%CVE-2024-29852LOWCVE-2024-29852EPSS 0.5%