What is the severity of CVE-2024-42455?

CVE-2024-42455 is considered a high severity vulnerability due to its potential impact on system integrity by allowing file deletion with elevated privileges.

How do I fix CVE-2024-42455?

To mitigate CVE-2024-42455, ensure you apply the latest patches and updates provided by Veeam for Backup & Replication.

What types of systems are affected by CVE-2024-42455?

CVE-2024-42455 affects systems running Veeam Backup & Replication with remoting services enabled.

Can a low-privileged user exploit CVE-2024-42455?

Yes, a low-privileged user can exploit CVE-2024-42455 to execute insecure deserialization and potentially delete files.

What are the implications of CVE-2024-42455 on data security?

The implications of CVE-2024-42455 include unauthorized deletion of critical files, which can lead to data loss and service disruption.

Vulnerability/
CVE-2024-42455

high

8.1

CWE

306

4/12/2024

24/4/2025

CVE-2024-42455

First published: Wed Dec 04 2024(Updated: )

A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The vulnerability is caused by an insufficient blacklist during the deserialization process.

Credit: support@hackerone.com

Affected Software	Affected Version	How to fix
Veeam
Veeam Backup & Replication	>=12.0.0.1402<12.3.0.310

Never miss a vulnerability like this again

Reference Links

https://www.veeam.com/kb4693

Frequently Asked Questions

What is the severity of CVE-2024-42455?
CVE-2024-42455 is considered a high severity vulnerability due to its potential impact on system integrity by allowing file deletion with elevated privileges.
How do I fix CVE-2024-42455?
To mitigate CVE-2024-42455, ensure you apply the latest patches and updates provided by Veeam for Backup & Replication.
What types of systems are affected by CVE-2024-42455?
CVE-2024-42455 affects systems running Veeam Backup & Replication with remoting services enabled.
Can a low-privileged user exploit CVE-2024-42455?
Yes, a low-privileged user can exploit CVE-2024-42455 to execute insecure deserialization and potentially delete files.
What are the implications of CVE-2024-42455 on data security?
The implications of CVE-2024-42455 include unauthorized deletion of critical files, which can lead to data loss and service disruption.

agent/references
agent/type
agent/description
agent/first-publish-date
agent/severity
agent/author
agent/last-modified-date
agent/weakness
agent/event
collector/mitre-cve
source/MITRE
agent/source
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/tags
agent/softwarecombine
collector/nvd-api
source/NVD
vendor/veeam
canonical/veeam
canonical/veeam backup & replication
version/veeam backup & replication/12.0.0.1402

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.