Paper/Archive/CVE-2024-42024

CVE-2024-42024

Veeam One — A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution…

EPSS 1%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 69.5.695 × 2013.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.

Affected

ProductAffectedFixed inSource

One12.1 – 12.1–CNA

one12 – 12.1.0.3208–CISA-ADP

Scores by source

hackerone (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refveeam.com/kb4649