Description
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 3 Jan 2023.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.