Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management agent and its components, under certain conditions, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.veeam.com/kb4575 | Vendor Advisory |
| https://www.veeam.com/kb4575 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Jun 2025, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Veeam
Veeam veeam Service Provider Console |
|
| CPE | cpe:2.3:a:veeam:veeam_service_provider_console:*:*:*:*:*:*:*:* | |
| References | () https://www.veeam.com/kb4575 - Vendor Advisory |
14 May 2024, 16:13
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-14 15:15
Updated : 2025-06-30 17:53
NVD link : CVE-2024-29212
Mitre link : CVE-2024-29212
JSON object : View
Products Affected
veeam
- veeam_service_provider_console
CWE
No CWE.