2 results (0.009 seconds)
CVSS: 9.9EPSS: 0%CPEs: 1EXPL: 1CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0
CVSS: 9.9EPSS: 0%CPEs: 1EXPL: 1CVE-2024-42448
https://notcve.org/view.php?id=CVE-2024-42448
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine. • https://github.com/h3lye/CVE-2024-42448-RCE https://www.veeam.com/kb4679 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-42449
https://notcve.org/view.php?id=CVE-2024-42449
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbitrary files on the VSPC server machine. • https://www.veeam.com/kb4679 •