The version of Veeam Backup and Replication with Veeam Backup Enterprise Manager installed on the remote Windows host is prior to 12.1.2.172. It is, therefore, affected by multiple vulnerabilities:

    - A vulnerability in Veeam Backup Enterprise Manager that allows an unauthenticated attacker to log in to the Veeam       Backup Enterprise Manager web interface as any user. (CVE-2024-29849)

    - A vulnerability in Veeam Backup Enterprise Manager that allows account takeover via NTLM relay. (CVE-2024-29850)

    - A vulnerability in Veeam Backup Enterprise Manager that allows a high-privileged user to steal the NTLM hash of       the Veeam Backup Enterprise Manager service account if that service account is anything other than the default       Local System account. (CVE-2024-29851)

    - A vulnerability in Veeam Backup Enterprise Manager that allows high-privileged users to read backup session logs.
      (CVE-2024-29852)

Note that Nessus has not tested for this issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Veeam Backup and Replication with Veeam Backup Enterprise Manager Multiple Vulnerabilities (KB4581)

critical Nessus Plugin ID 197721

Version 1.0