CVE-2024-42024: Critical severity veeam one vulnerability
Published Sep 7, 2024
·Updated
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.
Affected Software
1 affected component
Veeam ONE>=12.0.0.2498<12.2.0.4093
Event History
Sep 5, 2024
News Published
via BleepingComputer·02:17 PM
News Published
via BleepingComputer·02:19 PM
Sep 7, 2024
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42024?
CVE-2024-42024 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-42024?
To resolve CVE-2024-42024, it is recommended to update the Veeam ONE software to a secure version.
3
What are the consequences of CVE-2024-42024?
The consequences of CVE-2024-42024 include unauthorized remote code execution, which can compromise the affected system.
4
Who is affected by CVE-2024-42024?
CVE-2024-42024 affects users of Veeam ONE versions between 12.0.0.2498 and 12.2.0.4093.
5
What can attackers do with CVE-2024-42024?
Attackers with access to the Veeam ONE Agent service account credentials can execute arbitrary code on the target machine.