CVE-2024-45207 Vulnerability Details

  /     /     /  

CVE-2024-45207 Metadata Quick Info

CVE Published: 04/12/2024 | CVE Updated: 04/12/2024 | CVE Year: 2024
Source: hackerone | Vendor: Veeam | Product: Agent for Windows
Status : PUBLISHED

---

CVE-2024-45207 Description

DLL injection in Veeam Agent for Windows can occur if the system\'s PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently, allowing the attacker to execute harmful code. This could lead to unauthorized access, data theft, or disruption of services

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name:
Source: Veeam

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).