Vulnerabilitycritical

Veeam fixes critical RCEs in backup solution (CVE-2022-26500, CVE-2022-26501)

Help Net Securityby @zeljkazorzMar 15, 2022 · 00:00 UTC (Mar 15, 2022)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2022-26500 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-26500 CVE-2022-26501 CVE-2022-26504

Tags: cve-2022-26500 cve-2022-26501 cve-2022-26504 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-26501 +1 related CVE CVE-2022-26500	Unauthenticated RCE in Veeam Backup & Replication 10.x and 11.x	9.8 group max	4%	KEVRansomware	Mar 17, 2022 KEV Dec 13, 2022
CVE-2022-26504	Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM)…	8.8	3%		Mar 17, 2022

From the original article

1 min read at helpnetsecurity.com

Veeam Software has patched two critical vulnerabilities (CVE-2022-26500, CVE-2022-26501) affecting its popular Veeam Backup & Replication solution, which could be exploited by unauthenticated attackers to remotely execute malicious code. Veeam Backup & Replication is an enteprise data protection solution that allows admins to create image-level backups of virtual, physical, cloud machines and restore from them.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.