Vulnerabilitycritical

Watch out, Veeam fixed a new critical bug in Backup & Replication product

Security Affairsby @securityaffairsJun 18, 2025 · 13:33 UTC (Jun 18, 2025)2 min read3 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-23121 CVE-2025-23120 CVE-2025-24286 CVE-2025-24287

Tags: cve-2025-23121 cve-2025-23120 cve-2025-24286 cve-2025-24287 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-23120	Domain-User RCE via Deserialization in Veeam Backup & Replication	8.8	24%	PoC	Mar 20, 2025
CVE-2025-23121 +1 related CVE CVE-2025-24286	Authenticated Domain-User RCE in Veeam Backup & Replication	8.8 group max	22%		Jun 19, 2025
CVE-2025-24287	A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions	6.1	<1%		Jun 19, 2025

From the original article

2 min read at securityaffairs.com

Veeam addressed a new critical flaw in Backup & Replication product that could potentially result in remote code execution. Veeam has rolled out security patches to address a critical security vulnerability, tracked CVE-2025-23121 (CVSS score of 9. 9) in its Backup & Replication solution that can allow remote attackers to execute arbitrary code under certain conditions.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.