Unrated severityNVD Advisory· Published Jul 3, 2020· Updated Aug 4, 2024

CVE-2020-15518

Description

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests.

Affected products

Veeam/Availability Suitedescription
Veeam/Availability Suitellm-create
Range: <10
Veeam/Veeam Backup \& Replicationllm-fuzzy
Range: <10

Patches

Vulnerability mechanics

References

zwclose.github.io/veeamonmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000