CVE-2021-35971

CRITICAL

Veeam Backup and Replication <10.0.1.4854-11.0.0.837 - Deserialization

Title source: llm
STIX 2.1

Description

Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://www.veeam.com/kb4126
Release Notes, Vendor Advisory x_refsource_misc
https://www.veeam.com/kb4180

Scores

CVSS v3 9.8
EPSS 0.0124
EPSS Percentile 65.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-502
Status published
Products (1)
veeam/veeam_backup_\&_replication 10.0 - 10.0.1.4854
Published Jun 30, 2021
Tracked Since Feb 18, 2026