CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations

High · published December 4, 2024

CVSS v3.0
7.0
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently, allowing the attacker to execute harmful code. This could lead to unauthorized access, data theft, or disruption of services

The record
Technical detail
CVSS v3.0
7.0 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2024-12-04T01:06Z
EPSS history
Timeline
  • 04 DEC 01:06Z
    DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations
    cvelistv5