CVE-2020-15518

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests.
References
Link Resource
https://zwclose.github.io/veeamon Exploit Technical Description Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:veeam:veeam_availability_suite:*:*:*:*:*:*:*:*
cpe:2.3:a:veeam:veeam_backup_\&_replication:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-07-03 11:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-15518

Mitre link : CVE-2020-15518

CVE.ORG link : CVE-2020-15518


JSON object : View

Products Affected

veeam

  • veeam_availability_suite
  • veeam_backup_\&_replication
CWE
CWE-862

Missing Authorization