CVE-2020-15518

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to…

published July 3, 2020

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00994 · 62.3th percentile
Published
2020-07-03T10:58Z
EPSS history
Timeline
  • 03 JUL 10:58Z
    VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to…
    cvelistv5