CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

77.61% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2023-08-22, used in ransomware campaigns

Published

2023-03-10

Updated

2025-10-21

Proof-of-concept exploits (5)

• horizon3ai/CVE-2023-2753274★ · 2023-03-28
• puckiestyle/CVE-2023-27532-RCE-Only0★ · 2024-07-10
• sfewer-r7/CVE-2023-27532113★ · 2023-03-23
• yunus-a1i/veeam-cve-2023-27532-mock
• W1ngLess/CVE_2023_27532

References

• CVE Record
• NVD entry

Related

• CVE-2020-1472
• CVE-2021-1675
• CVE-2021-30461
• CVE-2021-3156
• CVE-2021-3493
• CVE-2021-41773