Remote Code Execution Flaw in Veeam Management Pack for Microsoft System Center
CVE-2023-22793

9.3CRITICAL

Key Information:

Vendor

Veeam
Status
Management Pack For Microsoft System Center
Vendor
CVE Published:
29 October 2026

What is CVE-2023-22793?

A significant vulnerability exists within the Veeam Management Pack for Microsoft System Center that allows unauthenticated attackers to execute arbitrary code on servers running the Veeam Virtualization Extensions service. This flaw could potentially lead to substantial unauthorized access and manipulation of system resources, exposing organizations to severe security risks and data breaches.

Affected Version(s)

Management Pack for Microsoft System Center 9.0 < 13.1.0.334

References

https://www.veeam.com/kb4961

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.