H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2022-12-13
Last seen2022-12-13

Confidence

—

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productVeeam Backup & Replication
Added2022-12-13
Due date2023-01-03
6 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2022-26501
open
cwe
CWE-306
open