Vulnerabilitycritical

Multiple RCE Vulnerabilities Discovered in Veeam Backup & Replication App

Infosecurity Magazineby Alessandro MascellinoOct 24, 2022 · 17:00 UTC (Oct 24, 2022)1 min read2 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2022-26500 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-26500 CVE-2022-26501 CVE-2022-26504

Tags: cve-2022-26500 cve-2022-26501 cve-2022-26504 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-26501 +1 related CVE CVE-2022-26500	Unauthenticated RCE in Veeam Backup & Replication 10.x and 11.x	9.8 group max	4%	KEVRansomware	Mar 17, 2022 KEV Dec 13, 2022
CVE-2022-26504	Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM)…	8.8	3%		Mar 17, 2022

From the original article

1 min read at infosecurity-magazine.com

Several critical and high-severity vulnerabilities have been discovered affecting the Veeam Backup & Replication application that could be exploited by advertising fully weaponized tools for remote code execution (RCE). The findings come from security researchers at CloudSEK , who published an advisory about them earlier today.

Infosecurity Magazine

By Alessandro Mascellino · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.