CVE-2024-42452: High severity veeam vulnerability
A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability exists because remote calls bypass permission checks, leading to full system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42452?
CVE-2024-42452 is classified with a high severity due to its potential for privilege escalation and unauthorized access.
How do I fix CVE-2024-42452?
To mitigate CVE-2024-42452, update to the latest version of Veeam Backup & Replication where the vulnerability has been patched.
Who is affected by CVE-2024-42452?
CVE-2024-42452 affects users of Veeam Backup & Replication who have low-privileged accounts.
What are the potential consequences of CVE-2024-42452?
Exploitation of CVE-2024-42452 allows attackers to escalate their privileges to system-level access, enabling them to upload files with elevated permissions.
When was CVE-2024-42452 disclosed?
CVE-2024-42452 was disclosed as part of the ongoing security assessments for Veeam Backup & Replication.