CVE-2024-29850

—

CVSS 3.0

8.8 high

EPSS

<1%p55

Published

May 22, 2024 (May 22, 2024)

Modified

Jun 17, 2026

Description

Veeam Backup Enterprise Manager allows account takeover via NTLM relay.

Vendors: veeam
Products: veeam backup \& replication
Weakness: CWE-294
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news3 stories

Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)

Help Net SecurityJun 13, 21:18 UTC · Jun 13, 2024Vulnerability in the wildCVE-2024-29849 CVE-2024-29850 CVE-2024-29851+1 CVEs

60

Critical Veeam Backup Enterprise Manager auth bypass bug

Security AffairsMay 22, 18:01 UTC · May 22, 2024Vulnerability CVE-2024-29849 CVE-2024-29850 CVE-2024-29851+1 CVEs

60

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

The Hacker NewsMay 22, 03:53 UTC · May 22, 2024Vulnerability CVE-2024-29849 CVE-2024-29850 CVE-2024-29851+4 CVEs

60