{"id":3443,"date":"2025-02-05T12:25:38","date_gmt":"2025-02-05T12:25:38","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/veeam-flaw-enables-arbitrary-code-execution-via-man-in-the-middle-attacks\/"},"modified":"2025-02-05T12:25:39","modified_gmt":"2025-02-05T12:25:39","slug":"veeam-flaw-enables-arbitrary-code-execution-via-man-in-the-middle-attacks","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/veeam-flaw-enables-arbitrary-code-execution-via-man-in-the-middle-attacks\/","title":{"rendered":"Veeam Flaw Enables Arbitrary Code Execution via Man-in-the-Middle Attacks"},"content":{"rendered":"\n<\/p>\n<h1>Critical Security Flaw in Veeam Backup Software<\/h1>\n<h2>February 5, 2025<\/h2>\n<h3>By Ravie Lakshmanan<\/h3>\n<h4>Vulnerability \/ Data Protection<\/h4>\n<p>Veeam has released patches to address a critical security flaw impacting its Backup software that could allow an attacker to execute arbitrary code on susceptible systems.<\/p>\n<h3>The Vulnerability<\/h3>\n<p>The vulnerability, tracked as <strong>CVE-2025-23114<\/strong>, carries a CVSS score of 9.0 out of 10.0.<\/p>\n<h4>How It Works<\/h4>\n<p>&quot;A vulnerability within the Veeam Updater component that allows an attacker to utilize a Man-in-the-Middle attack to execute arbitrary code on the affected appliance server with root-level permissions,&quot; Veeam said in an advisory.<\/p>\n<h3>Affected Products<\/h3>\n<p>The shortcoming impacts the following products:<\/p>\n<ul>\n<li>Veeam Backup for Salesforce \u2014 3.1 and older<\/li>\n<li>Veeam Backup for Nutanix AHV \u2014 5.0 | 5.1 (Versions 6 and higher are unaffected by the flaw)<\/li>\n<li>Veeam Backup for AWS \u2014 6a | 7 (Version 8 is unaffected by the flaw)<\/li>\n<li>Veeam Backup for Microsoft Azure \u2014 5a | 6 (Version 7 is unaffected by the flaw)<\/li>\n<li>Veeam Backup for Google Cloud \u2014 4 | 5 (Version 6 is unaffected by the flaw)<\/li>\n<li>Veeam Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization \u2014 3 | 4.0 | 4.1 (Versions 5 and higher are unaffected by the flaw)<\/li>\n<\/ul>\n<h3>Patched Versions<\/h3>\n<p>It has been addressed in the below versions:<\/p>\n<ul>\n<li>Veeam Backup for Salesforce &#8211; Veeam Updater component version 7.9.0.1124<\/li>\n<li>Veeam Backup for Nutanix AHV &#8211; Veeam Updater component version 9.0.0.1125<\/li>\n<li>Veeam Backup for AWS &#8211; Veeam Updater component version 9.0.0.1126<\/li>\n<li>Veeam Backup for Microsoft Azure &#8211; Veeam Updater component version 9.0.0.1128<\/li>\n<li>Veeam Backup for Google Cloud &#8211; Veeam Updater component version 9.0.0.1128<\/li>\n<li>Veeam Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization &#8211; Veeam Updater component version 9.0.0.1127<\/li>\n<\/ul>\n<h3>Impact<\/h3>\n<p>&quot;If a Veeam Backup &amp; Replication deployment is not protecting AWS, Google Cloud, Microsoft Azure, Nutanix AHV, or Oracle Linux VM\/Red Hat Virtualization, such a deployment is not impacted by the vulnerability,&quot; the company noted.<\/p>\n<h3>Stay Informed<\/h3>\n<p>Found this article interesting?  Follow us on <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener nofollow\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener nofollow\" target=\"_blank\">LinkedIn<\/a> to read more exclusive content we post.<\/p>\n\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/02\/new-veeam-flaw-allows-arbitrary-code.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Critical Security Flaw in Veeam Backup Software February 5, 2025 By Ravie Lakshmanan Vulnerability \/ Data Protection Veeam has released patches to address a critical security flaw impacting its Backup&#8230;<\/p>\n","protected":false},"author":19,"featured_media":3444,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-3443","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/veeam.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3443","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=3443"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3443\/revisions"}],"predecessor-version":[{"id":3445,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3443\/revisions\/3445"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/3444"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=3443"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=3443"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=3443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}