Exploit / PoCcritical

Veeam fixed a critical flaw in Veeam Backup & Replication software

Security Affairsby @securityaffairsOct 11, 2024 · 21:46 UTC (Oct 11, 2024)2 min read4 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-40711 CVE-2024-40713 CVE-2024-40710 CVE-2024-40712 CVE-2024-40714 CVE-2024-39718

Tags: cve-2024-40711 cve-2024-40713 cve-2024-40710 cve-2024-40712 cve-2024-40714 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-40710 +4 related CVEs CVE-2024-40714 CVE-2024-39718 CVE-2024-40713 CVE-2024-40712	A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive…	8.8 group max	1%		Sep 7, 2024
CVE-2024-40711	Unauthenticated Deserialization RCE in Veeam Backup & Replication	9.8	90%	KEVRansomwarePoC	Sep 7, 2024 KEV Oct 17, 2024

From the original article

2 min read at securityaffairs.com

Veeam addressed 18 high and critical severity flaws in Veeam Backup & Replication, Service Provider Console, and One. Veeam released security updates to address multiple vulnerabilities impacting its products, the company fixed 18 high and critical severity flaws in Veeam Backup & Replication, Service Provider Console, and One.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.