CVE-2024-40715

HIGH

Veeam Backup & Replication Enterprise Manager - Auth Bypass

Title source: llm

Description

A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle (MITM) attack to exploit this vulnerability.

References (1)

[Vendor Advisory] https://www.veeam.com/kb4682

Scores

CVSS v3 7.7

EPSS 0.0022

EPSS Percentile 44.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-294

Status published

Products (1)

veeam/veeam_backup_\&_replication < 12.2.0.334

Published Nov 07, 2024

Tracked Since Feb 18, 2026