This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Veeam Service Provider Console fixes 2 vulnerabilities

Veeam Service Provider Console (VSPC) version 8.1.0.21999 fixes 2 vulnerabilities, one of which is critical [1].

Veeam Service Provider Console - RCE (CVE-2024-42448)
CVSS 9.9 (Critical)

Allows an authenticated remote attacker with access to the VSPC server to execute code on the server via the VSPC management agent [1].

The vulnerability is present in product:

  • Veeam Service Provider Console; >=7.0.0.12777, <=7.0.0.19551; >=8.0.0.16877, <=8.0.0.19552; ==8.1.0.21377;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 3. 12. 2024.

Veeam Service Provider Console - sensitive data leakage (CVE-2024-42449)
CVSS 7.1 (High)

Allows an authenticated remote attacker with access to the VSPC server, via the VSPC management agent on the server, to delete files without authorization and to obtain the NT LAN Manager (NTLM) hash of the server's service account [1][2].

The vulnerability is present in product:

  • Veeam Service Provider Console; >=7.0.0.12777, <=7.0.0.19551; >=8.0.0.16877, <=8.0.0.19552; ==8.1.0.21377;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

More information:

The vulnerability was publicly disclosed 3. 12. 2024.

By CESNET, z.s.p.o. Michaela Ručková on 9. 12. 2024.

CESNET, z.s.p.o. Logo