Remote Code Execution (RCE) Vulnerability in VSPC Management Agent

CVE-2024-42448

Summary

A remote code execution vulnerability exists in the VSPC management agent allowing an authorized agent on the server to execute arbitrary code on the VSPC server machine. This vulnerability can pose significant security risks by enabling unauthorized actions and data exposure on the affected systems.

News Articles

Help Net Security

CVE-2024-42448CVE-2024-8785

Week in review: Veeam Service Provider Console flaws fixed, Patch Tuesday forecast - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Veeam plugs serious holes in Service Provider Console

1 month ago

The Cyber Express

CVE-2024-42448CVE-2024-42449

Critical Veeam Vulnerabilities (CVE-2024-42448, CVE-2024-42449)

Veeam vulnerabilities in Service Provider Console 8.1, including Remote Code Execution (CVE-2024-42448) and NTLM hash leak (CVE-2024-42449).

1 month ago

SC Media

CVE-2024-42448CVE-2024-42449

Veeam patches bugs in VSPC, one leading to remote code execution

In patching a 9.9 bug and a high-severity flaw, Veeam said the only available remedy is to apply the patches.

1 month ago

More News...

References