CVE-2023-27532KEV · OVERDUECWE-306

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

High · published March 10, 2023

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.

1138
days past CISA
deadline
CVSS v3.1
7.5
EPSS
81%
Percentile
99.6
In the wild
Confirmed
What it is

🚨 Your encrypted backup credentials are under threat! A vulnerability in Veeam Backup & Replication lets attackers access sensitive info stored in the configuration database. 🔥 Think of this like a sneaky thief who finds a way to read the combination to your safe without even opening it. The thief can then waltz in and take what they want without raising any alarms! An attacker could gain unauthorized access to the entire backup infrastructure, potentially leading to data loss, system compromise, or even ransomware attacks on your critical systems. This is a serious risk that could leave your organization vulnerable to extensive damage!

Put simply

Think of this like a sneaky thief who finds a way to read the combination to your safe without even opening it. The thief can then waltz in and take what they want without raising any alarms! This vulnerability allows attackers to retrieve encrypted credentials from the Veeam Backup & Replication configuration database, enabling them to access backup hosts without proper authorization.

What to do

An attacker could gain unauthorized access to the entire backup infrastructure, potentially leading to data loss, system compromise, or even ransomware attacks on your critical systems. This is a serious risk that could leave your organization vulnerable to extensive damage! Immediately update to the latest version of Veeam Backup & Replication to patch the vulnerability. Review access controls and monitor for any unauthorized access attempts. Consider rotating credentials as an added precaution. You've got this! Follow these steps and you'll have your backup environment secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.80599 · 99.6th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-03-10T00:00Z
KEV added
2023-08-22 · due 2023-09-12
EPSS history
Timeline
  • 22 AUG 00:00Z
    Added to CISA KEV — remediate by Sep 12
    kev
  • 10 MAR 00:00Z
    Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained
    cvelistv5