CVE-2023-22793
Veeam Management Pack for Microsoft System Center
- Veeam Management Pack for Microsoft System Center
- Critical
- CVSS 9.3
- Fixed version listed
Summary
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.
From the CVE record.
What to do
Fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Veeam Management Pack for Microsoft System Center | from 9.0, before 13.1.0.334 | 13.1.0.334 |
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.3 (v4.0, scored by hackerone)
- Weakness
- CWE-502: Deserialization of Untrusted Data
- Vendor
- Veeam, Management Pack for Microsoft System Center
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.