CVE-2024-42448

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.

Affected

Veeam · Service Provider Console

CVSS v3.0 HACKERONE

9.9 CRITICALCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

19.93% chance of exploitation in the next 30 days, 97th percentile

Published

2024-12-11

Updated

2024-12-12

Proof-of-concept exploits (1)

• h3lye/CVE-2024-42448-RCE0★ · 2024-12-05

References

• CVE Record
• NVD entry