Vulnerability Details CVE-2024-42019
A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.2%
CVSS Severity
CVSS v3 Score 9.0
References
Products affected by CVE-2024-42019
-
cpe:2.3:a:veeam:one:10.0.0.750
-
cpe:2.3:a:veeam:one:10.0.2.1094
-
cpe:2.3:a:veeam:one:11.0.0.1379
-
cpe:2.3:a:veeam:one:11.0.1.1880
-
cpe:2.3:a:veeam:one:12.0.0.2498
-
cpe:2.3:a:veeam:one:12.0.1.2591
-
cpe:2.3:a:veeam:one:6.0.0.520
-
cpe:2.3:a:veeam:one:6.5.0.676
-
cpe:2.3:a:veeam:one:6.5.0.686
-
cpe:2.3:a:veeam:one:7.0.0.876
-
cpe:2.3:a:veeam:one:7.0.0.919
-
cpe:2.3:a:veeam:one:7.0.0.949
-
cpe:2.3:a:veeam:one:8.0.0.1567
-
cpe:2.3:a:veeam:one:8.0.0.1569
-
cpe:2.3:a:veeam:one:8.0.0.1615
-
cpe:2.3:a:veeam:one:8.0.0.1669
-
cpe:2.3:a:veeam:one:9.0.0.2062
-
cpe:2.3:a:veeam:one:9.0.0.2088
-
cpe:2.3:a:veeam:one:9.5.0.3201
-
cpe:2.3:a:veeam:one:9.5.0.3254
-
cpe:2.3:a:veeam:one:9.5.0.3801
-
cpe:2.3:a:veeam:one:9.5.4.4566
-
cpe:2.3:a:veeam:one:9.5.4.4587