CVE-2024-29850: High severity Veeam Veeam Backup \& Replication vulnerability
Published May 22, 2024
·Updated
Veeam Backup Enterprise Manager allows account takeover via NTLM relay.
Affected Software
1 affected component
Veeam Veeam Backup \& Replication<12.1.2.172
Event History
May 21, 2024
News Published
via BleepingComputer·10:24 PM
News Published
via BleepingComputer·10:25 PM
May 22, 2024
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
May 23, 2024
News Published
via The Register·02:30 PM
News Published
via The Register·02:35 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-29850?
CVE-2024-29850 is regarded as a critical vulnerability due to its potential for account takeover via NTLM relay.
2
How do I fix CVE-2024-29850?
To mitigate CVE-2024-29850, it is recommended to update Veeam Backup & Replication to a version above 12.1.2.172.
3
What software is affected by CVE-2024-29850?
CVE-2024-29850 affects Veeam Backup & Replication versions up to 12.1.2.172.
4
What impact does CVE-2024-29850 have on systems?
CVE-2024-29850 allows attackers to take over accounts, potentially compromising sensitive data.
5
Is CVE-2024-29850 a local or remote vulnerability?
CVE-2024-29850 is categorized as a remote vulnerability, allowing exploitation from an external network.