Veeam’s Vulnerability Comedy: When Your Backup Needs a Backup!
Veeam released an update patch for a critical vulnerability in its Service Provider Console, tracked as CVE-2024-42448, with a CVSS score of 9.9. Exploiting this could lead to remote code execution. Another vulnerability, CVE-2024-42449, could leak an NTLM hash, affecting versions 8.1.0.21377 and earlier. Time to patch up, folks!
Hot Take:
Ah, Veeam! While trying to keep our data safe, they accidentally left the back door open. It’s like locking your front door but leaving the window wide open. Time to patch up, folks, before those cybercriminals start RSVP-ing to the RCE party!
Key Points:
- Veeam releases an update to fix a critical vulnerability, CVE-2024-42448, with a CVSS score of 9.9.
- The vulnerability could lead to remote code execution (RCE) if exploited.
- A secondary vulnerability, CVE-2024-42449, poses a risk of leaking NTLM hashes and file deletion.
- Both vulnerabilities affect VSPC version 8.1.0.21377 and earlier versions.
- Veeam urges users to update to the latest cumulative patch as there are no current mitigations.
Already a member? Log in here