{"id":10990,"date":"2025-03-20T14:48:41","date_gmt":"2025-03-20T14:48:41","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/veeam-ibm-patch-high-risk-flaws\/"},"modified":"2025-03-20T14:48:42","modified_gmt":"2025-03-20T14:48:42","slug":"veeam-ibm-patch-high-risk-flaws","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/veeam-ibm-patch-high-risk-flaws\/","title":{"rendered":"Veeam &#038; IBM patch high-risk flaws"},"content":{"rendered":"\n<br \/>Here is a rewritten version of the content:<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Mar 20, 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Vulnerability \/ Software Update<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\">\n<a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhi4VYBD2wz1y9f-FHTctaMgPoYTLRw61svdIohC_vjMnafMTN92iX1SaYmmUVPvx8T0_eKWfe7aioYLIdnLIbWfe0r4KFMxZ7dbZ-0kxWyRTi5KDAC3KC8GcWvVLJ9kBuDgsKfl7O-PQ9RB43qXNaOK_TN8ed94Meqzq3JpGEgWc5lC0iTYPTKpF3IDnT0\/s728-rw-e365\/vulnerability.png\" style=\"clear: left; display: block; float: left;  text-align: center;\" rel=\"nofollow noopener\" target=\"_blank\"><\/p>\n<p><\/a>\n<\/div>\n<p>Veeam has released a security update to fix a critical vulnerability in its Backup &#038; Replication software, which could be exploited for remote code execution.<\/p>\n<p>The vulnerability, identified as <strong>CVE-2025-23120<\/strong>, has a CVSS score of 9.9 out of 10.0 and affects all versions prior to 12.3.0.310.<\/p>\n<p>According to Veeam&#8217;s <a href=\"https:\/\/www.veeam.com\/kb4724\" rel=\"noopener nofollow\" target=\"_blank\">advisory<\/a>, the vulnerability allows remote code execution by authenticated domain users.<\/p>\n<p>Piotr Bazydlo, a security researcher at watchTowr, discovered and reported the flaw, which has been resolved in version 12.3.1 (build 12.3.1.1139).<\/p>\n<p>Researchers Bazydlo and Sina Kheirkhah explained that the vulnerability stems from Veeam&#8217;s inconsistent handling of deserialization mechanisms, allowing an attacker to bypass security measures and achieve remote code execution.<\/p>\n<p>This means that an attacker could exploit a deserialization gadget not included in the blocklist, specifically Veeam.Backup.EsxManager.xmlFrameworkDs and Veeam.Backup.Core.BackupSummary, to execute malicious code.<\/p>\n<div class=\"dog_two clear\">\n<center class=\"cf\"><br \/>\n<a href=\"https:\/\/thehackernews.uk\/cis-securesuite\" rel=\"nofollow noopener sponsored\" target=\"_blank\" title=\"Cybersecurity\"><br \/>\n<img fetchpriority=\"high\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhsFQaSLfkFdKcodtNnSya8V2yj1C_ZVcqQImhnHDikdLhrgZ4hoAIdzNPEjMn6tIl2dSBa9PZVJm5Q6CW4Iprd32O0xaNt3UTVX1U9kEK629GDLqpr7Dd6lynygeNXdkuKNi_TlVZ1vRZI_fXFdvFwBm25WNf4tQHZfgpXHiaw1nnd6E5jLX8vrn4fB3mN\/s728-e100\/cis-d.png\" width=\"727\" height=\"90\"\/><br \/>\n<\/a><br \/>\n<\/center>\n<\/div>\n<p>Researchers noted that any user belonging to the local users group on the Windows host of the Veeam server can exploit the vulnerability, and even domain users can exploit it if the server is joined to the domain.<\/p>\n<p>Veeam&#8217;s patch adds the two gadgets to the existing blocklist, but the solution may still be vulnerable to similar risks if other deserialization gadgets are discovered.<\/p>\n<p>Meanwhile, IBM has <a href=\"https:\/\/www.ibm.com\/support\/pages\/node\/7186621\" rel=\"noopener nofollow\" target=\"_blank\">released fixes<\/a> for two critical bugs in its AIX operating system that could allow command execution.<\/p>\n<p>The vulnerabilities, which affect AIX versions 7.2 and 7.3, are:<\/p>\n<ul>\n<li><strong>CVE-2024-56346<\/strong> (CVSS score: 10.0): An improper access control vulnerability that could allow a remote attacker to execute arbitrary commands via the AIX nimesis NIM master service.<\/li>\n<li><strong>CVE-2024-56347<\/strong> (CVSS score: 9.6): An improper access control vulnerability that could allow a remote attacker to execute arbitrary commands via the AIX nimsh service SSL\/TLS protection mechanism.<\/li>\n<\/ul>\n<p>Although there is no evidence of these vulnerabilities being exploited in the wild, users are advised to apply the necessary patches to secure against potential threats.<\/p>\n<div class=\"cf note-b\">\nFound this article interesting?  Follow us on <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener nofollow\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener nofollow\" target=\"_blank\">LinkedIn<\/a> to read more exclusive content we post.\n<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/03\/veeam-and-ibm-release-patches-for-high.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Here is a rewritten version of the content: \ue802Mar 20, 2025\ue804Ravie LakshmananVulnerability \/ Software Update Veeam has released a security update to fix a critical vulnerability in its Backup &#038;&#8230;<\/p>\n","protected":false},"author":19,"featured_media":10991,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-10990","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/03\/vulnerability.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/10990","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=10990"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/10990\/revisions"}],"predecessor-version":[{"id":10992,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/10990\/revisions\/10992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/10991"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=10990"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=10990"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=10990"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}