CVE-2020-15518

ALTO 8.8CVE-2020-15518 · Published 03/07/2020 · updated 17/06/2026

In breve

CVE-2020-15518 è una vulnerabilità ALTO (CVSS 8.8) che riguarda veeam availability suite (veeam), veeam backup & replication (veeam).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.99%, superiore al 62.6% delle vulnerabilità.
Correzione: aggiornare a 10.0 o successiva.

Package	Affected versions	Patched versions
veeam availability suite veeam	`< 10.0`	`10.0`
veeam backup & replication veeam	`< 10.0`	`10.0`

Description

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests.

References

zwclose.github.io/veeamon · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free