← Back to browse · API

CVE-2024-42448

Severity
CRITICAL
CVSS
9.9
EPSS
0.20057
Risk score
46.62
CISA KEV
No
PoC
No
Published
2024-12-11
Modified
2024-12-12
First seen
2026-08-07
Aliases
EUVD-2024-39436, GHSA-W4GC-9X8J-9HJV
Products
Veeam:Service Provider Console 8.1 ≤8.1
Sources
euvd EUVD-2024-39436

Description

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.

References