CVE-2024-29853: High severity Veeam Veeam Agent for Windows vulnerability
Published May 22, 2024
·Updated
An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation.
Affected Software
1 affected component
Veeam Veeam Agent for Windows<6.1.2.134
Event History
May 22, 2024
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29853?
CVE-2024-29853 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
2
How do I fix CVE-2024-29853?
To mitigate CVE-2024-29853, ensure that you update Veeam Agent for Microsoft Windows to the latest version beyond 6.1.2.134.
3
What are the impacts of CVE-2024-29853?
CVE-2024-29853 allows attackers to bypass authentication and gain unauthorized local privileges on affected systems.
4
Which systems are affected by CVE-2024-29853?
CVE-2024-29853 affects Veeam Agent for Microsoft Windows versions up to 6.1.2.134.
5
Who is responsible for addressing CVE-2024-29853?
It is the responsibility of Veeam and users of their software to implement patches and updates to remediate CVE-2024-29853.