critical
9
CWE
287
Advisory Published
Updated

CVE-2022-26504

First published: Thu Mar 17 2022(Updated: )

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe

Credit: cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Veeam Backup \& Replication>=10.0.0.4442<10.0.1.4854
Veeam Backup \& Replication>=11.0.0.825<11.0.1.1261
Veeam Backup \& Replication=9.5.0.1536
Veeam Backup \& Replication=9.5.4.2615
Veeam Backup \& Replication=10.0.1.4854
Veeam Backup \& Replication=10.0.1.4854-p20201202
Veeam Backup \& Replication=10.0.1.4854-p20210609
Veeam Backup \& Replication=10.0.1.4854-p20220304
Veeam Backup \& Replication=11.0.1.1261
Veeam Backup \& Replication=11.0.1.1261-p20211123
Veeam Backup \& Replication=11.0.1.1261-p20211211
Veeam Backup \& Replication=11.0.1.1261-p20220302
Veeam Veeam Backup \& Replication>=10.0.0.4442<10.0.1.4854
Veeam Veeam Backup \& Replication>=11.0.0.825<11.0.1.1261
Veeam Veeam Backup \& Replication=9.5.0.1536
Veeam Veeam Backup \& Replication=9.5.4.2615
Veeam Veeam Backup \& Replication=10.0.1.4854
Veeam Veeam Backup \& Replication=10.0.1.4854-p20201202
Veeam Veeam Backup \& Replication=10.0.1.4854-p20210609
Veeam Veeam Backup \& Replication=10.0.1.4854-p20220304
Veeam Veeam Backup \& Replication=11.0.1.1261
Veeam Veeam Backup \& Replication=11.0.1.1261-p20211123
Veeam Veeam Backup \& Replication=11.0.1.1261-p20211211
Veeam Veeam Backup \& Replication=11.0.1.1261-p20220302

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2022-26504?

    CVE-2022-26504 is a vulnerability that allows attackers to execute arbitrary code in Veeam Backup & Replication 9.5U3, 9.5U4, 10.x, and 11.x.

  • Which versions of Veeam Backup & Replication are affected by CVE-2022-26504?

    Veeam Backup & Replication versions 9.5U3, 9.5U4, 10.x, and 11.x are affected by CVE-2022-26504.

  • What is the severity of CVE-2022-26504?

    CVE-2022-26504 has a severity rating of 8.8 (critical).

  • How can this vulnerability be exploited?

    This vulnerability can be exploited by attackers to execute arbitrary code via Veeam.Backup.PSManager.exe.

  • How can I fix CVE-2022-26504?

    To fix CVE-2022-26504, update Veeam Backup & Replication to a version that is not affected by the vulnerability.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203