CVE-2024-407119.8Critical
CVE-2024-40711: Veeam Backup & Replication vulnerability
Veeam · Backup & Replication
No fix listed · Affected: Veeam Backup & Replication · Exploitation: in CISA KEV since 17 Oct 2024
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue17 Oct 2024
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public2 public GitHub repositories (unverified), listed by PoC-in-GitHub15 Sep 2024
- Not established: not seen
90.4%probability of exploitation in the next 30 days
99th percentile
050100
Higher than 99% of scored CVEs
9.8CriticalCVSS
LowMediumHighCrit.
Federal deadline
CISA KEV · added 17 Oct · catalogue entry
Passed 733 days ago
DescriptionNVD
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
What changed
- CISA’s KEV entry now notes known ransomware use CISA
- CISA added it to the KEV catalogue CISA
- PoC-in-GitHub lists 2 public GitHub repositories (unverified) PoC-in-GitHub
Coverage1 article · 1 outlet
First in our coverage: The Hacker News, 11 Nov.
- Cynet Finds Reverse Shell Activity Targeting Qlik Sense ServersThe Hacker News · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.