CVE-2022-26500 — Veeam Backup & Replication Remote Code Execution Vulnerability
CVE-2022-26500: Veeam Backup & Replication Remote Code Execution Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Veeam |
| Product | Backup & Replication |
| Date added | 2022-12-13 |
| Due date | 2023-01-03 |
| Ransomware campaign use | Known |
Description
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://www.veeam.com/kb4288; https://nvd.nist.gov/vuln/detail/CVE-2022-26500
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-26500
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog