Multiple RCE Vulnerabilities Discovered in Veeam Backup & Replication App

A number of critical and significant-severity vulnerabilities have been discovered impacting the Veeam Backup & Replication software that could be exploited by advertising and marketing fully weaponized applications for distant code execution (RCE).

The conclusions occur from security researchers at CloudSEK, who posted an advisory about them before nowadays.

“Several menace actors were noticed promotion the entirely weaponized software for remote code execution to exploit the next vulnerabilities influencing Veeam Backup & Replication: CVE-2022-26500 and CVE-2022-26501 with a CVSS V3 score of 9.8 and CVE-2022-26504 with a CVSS V3 rating of 8.8,” reads the technological produce-up.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

According to CloudSEK, the productive exploitation of these widespread vulnerabilities and exposures (CVEs) can guide to copying data files within the boundaries of the locale or from a remote Server Concept Block (SMB) network, RCE without having authorization or RCE/LPE without having authorization.

From a complex standpoint, Veeam Backup & Replication is a proprietary backup application for digital environments developed on VMware vSphere, Nutanix AHV and Microsoft Hyper-V hypervisors.

The application not only backs up and recovers digital devices (VMs) but can also be applied to defend and restore particular person data files and programs for environments these types of as Trade and SharePoint.

As for attribution, CloudSEK has mentioned malware named ‘Veeamp’ was found in the wild and employed by the Monti and Yanluowang ransomware teams to dump qualifications from an SQL database for Veeam backup administration software package.

The organization has also discovered a GitHub repository named “veeam-creds” that contained scripts for recovering passwords from the Veeam Backup & Replication credential supervisor alongside a few destructive data files.

CloudSEK has disclosed the over vulnerabilities to Veeam, which has already unveiled patches in the 11..1.1261 variation of its software package.

The text of the CloudSEK advisory is accessible on the corporation web page and consists of a finish record of Indicators of Compromise (IoCs).

Its publication will come a pair of months after virtualization technology application business VMware launched patches to fix a intense vulnerability in its VMware Tools suite of utilities.