NetSight
high8.8

CVE-2022-26504

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) all…

Impact

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe

Affected products

VendorProductAffected versions
VeeamVeeam Backup \& Replication
from 10.0.0.4442 before 10.0.1.4854
from 11.0.0.825 before 11.0.1.1261
Versions 9.5.0.1536, 9.5.4.2615, 10.0.1.4854, 11.0.1.1261

Weakness classification

References