CVE-2023-27532

Published Mar 10, 2023

Last updated 6 months ago

Veeam Backup & Replication

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-27532 is a vulnerability in Veeam Backup & Replication that allows an unauthenticated attacker within the backup infrastructure network to obtain encrypted credentials stored in the configuration database. The vulnerability affects the Veeam.Backup.Service.exe process, which by default uses TCP port 9401. Successful exploitation of CVE-2023-27532 can lead to an attacker gaining access to the backup infrastructure hosts. A proof-of-concept (PoC) exploit has been released that allows a remote, unauthenticated threat actor with access to the VBR service to obtain plaintext usernames and passwords, potentially leading to privilege elevation and remote code execution.

Description: Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
Source: support@hackerone.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Exploit added on: Aug 22, 2023
Exploit action due: Sep 12, 2023
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

support@hackerone.com: CWE-306
nvd@nist.gov: CWE-306

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:veeam:veeam_backup_\\&_replication:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FCD9FAE2-4E62-41AC-85EC-5793FD30A3AD",
            "versionEndExcluding": "11.0.1.1261"
          },
          {
            "criteria": "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EC28D606-0A9B-46E5-A88C-8041357979DB"
          },
          {
            "criteria": "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211123:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8158D6BC-2041-4600-B935-AD928621D987"
          },
          {
            "criteria": "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211211:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "54A5147A-341A-4790-AAA8-DF2648423C50"
          },
          {
            "criteria": "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20220302:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F5A2E58-F9C3-4A65-A83B-C86C970A01D2"
          },
          {
            "criteria": "cpe:2.3:a:veeam:veeam_backup_\\&_replication:12.0.0.1420:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CA570EC1-4A95-4AD3-8E8C-087769F95F02"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.