high8.8
CVE-2024-40710
A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive inf…
Impact
A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive information (savedcredentials and passwords). Exploiting these vulnerabilities requires a user who has been assigned a low-privileged role within Veeam Backup & Replication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veeam | Veeam Backup \& Replication | before 12.2.0.334 |