Descripción
Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- Aviso de veeam.com veeam.com/kb4649
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2024-40711
Otras vulnerabilidades de Veeam en el catálogo
- CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Alta 22-08-2023
- CVE-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability Alta 13-12-2022
- CVE-2022-26500 Veeam Backup & Replication Remote Code Execution Vulnerability Alta 13-12-2022