Veeam · Backup & Replication
CVE-2023-27532
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
What it is
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
CISA: Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Deadline for US federal agencies: September 12, 2023
- Added to the CISA list
- August 22, 2023
- Published
- March 10, 2023
- Severity
- High 7.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 81% in the top 0.4% of all known vulnerabilities
- Weakness
- CWE-306
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from Veeam
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 17, 2024 | Backup and Replication Deserialization | Backup & Replication | Critical 9.8 | 90% |
| Dec 13, 2022 | Remote Code Execution | Backup & Replication | High 8.8 | 5.8% |
| Dec 13, 2022 | Remote Code Execution | Backup & Replication | Critical 9.8 | 4.1% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.