CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

Affected

Veeam Backup & Replication

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

81.33% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2023-08-22, used in ransomware campaigns

Published

2023-03-10

Updated

2025-10-21

Proof-of-concept exploits (5)

• horizon3ai/CVE-2023-2753275★ · 2023-03-28
• puckiestyle/CVE-2023-27532-RCE-Only0★ · 2024-07-10
• sfewer-r7/CVE-2023-27532114★ · 2023-03-23
• yunus-a1i/veeam-cve-2023-27532-mock0★ · 2025-11-26
• W1ngLess/CVE_2023_275320★ · 2026-01-24

Security advisories

• https://www.veeam.com/kb4424

References

• CVE Record
• NVD entry

Related

• CVE-2020-1472
• CVE-2021-1675
• CVE-2021-30461
• CVE-2021-3156
• CVE-2021-3493
• CVE-2021-41773