Veeam Backup & Replication Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 13/12/2022. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| veeam backup & replication | = 10.0.1.4854= 11.0.1.1261≥ 10.0.0.4442, < 10.0.1.4854≥ 11.0.0.825, < 11.0.1.1261 | 10.0.1.485411.0.1.1261 |
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free