Vulnerabilitycritical
Critical flaws affect Veeam Data Backup software
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-26501+1 related CVE | Unauthenticated RCE in Veeam Backup & Replication 10.x and 11.x | 9.8 group max | 4% | KEVRansomware | KEV |
| CVE-2022-26503 | Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system… | 7.8 | <1% | ||
| CVE-2022-26504 | Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM)… | 8.8 | 3% |
From the original article
1 min read at securityaffairs.com
Veeam addressed two critical vulnerabilities impacting the Backup & Replication product for virtual environments. Veeam has released security patches to fix two critical vulnerabilities, tracked as CVE-2022-26500 and CVE-2022-26501 (CVSS score of 9. 8), impacting the Backup & Replication solution for virtual environments.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.