CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
hackeroneCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
veeamveeam_backup_\&_replication
𝑥
< 11.0.1.1261
veeamveeam_backup_\&_replication
11.0.1.1261
veeamveeam_backup_\&_replication
11.0.1.1261:p20211123
veeamveeam_backup_\&_replication
11.0.1.1261:p20211211
veeamveeam_backup_\&_replication
11.0.1.1261:p20220302
veeamveeam_backup_\&_replication
12.0.0.1420
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.veeam.com/kb4424
https://www.veeam.com/kb4424
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532