NetSight
high7.8

CVE-2022-26503

Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system priv…

Impact

Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system privileges.

Affected products

VendorProductAffected versions
VeeamVeeam
from 4.0.0 before 4.0.2.2208
from 5.0.0 before 5.0.3.4708
Versions 2.0, 2.1, 2.2, 3.0.2

Weakness classification

References