high8.8
CVE-2020-15518
VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achie…
Impact
VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veeam | Veeam Availability Suite | before 10.0 |
| Veeam | Veeam Backup \& Replication | before 10.0 |