CVE-2024-40711

Description

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

Affected Platforms

Weakness Type

CWE-502, CWE-502

References

• https://www.veeam.com/kb4649
• https://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-withou…
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-…