Risk Letters

Exploited vulnerability

CVE-2023-27532

TLP:CLEAR

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts.

Facts

  • Vendor: Veeam
  • Product: Backup & Replication
  • CVSS: 7.5
  • EPSS (probability of exploitation within 30 days): 80.6 %
  • On CISA's Known Exploited Vulnerabilities list since: 22 August 2023
  • First known exploitation: 22 August 2023
  • Used in ransomware campaigns (per CISA): Yes
  • CISA's deadline for US federal agencies: 12 September 2023
  • Weakness: CWE-306
  • First seen by Risk Letters: 22 August 2023

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD