Skip to main content

Veeam CVE-2022-43549

CRITICAL
Improper Authentication (CWE-287)
2022-12-05 support@hackerone.com
Authentication Bypass Google Veeam Veeam Backup For Google Cloud
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 05, 2022 - 22:15 nvd
CRITICAL 9.8

DescriptionNVD

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms.

AnalysisAI

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms. Affected products include: Veeam Veeam Backup For Google Cloud.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Veeam

View all
CVE-2020-10915 CRITICAL POC
9.8 Apr 22

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.
CVE-2020-10914 CRITICAL POC
9.8 Apr 22

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.
CVE-2024-40711 CRITICAL POC
9.8 Sep 07

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code exec
CVE-2020-15518 HIGH POC
8.8 Jul 03

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, w
CVE-2019-11569 HIGH POC
8.8 May 06

Veeam ONE Reporter 9.5.0.3201 allows CSRF. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, n
CVE-2026-64633 CRITICAL
10.0 Aug 04

Remote unauthenticated code execution in Veeam ONE (CPE cpe:2.3:a:veeam:one) allows attackers to run arbitrary code on t
CVE-2026-21708 CRITICAL
9.9 Mar 12

Veeam Backup & Replication allows a user with the Backup Viewer role (read-only) to escalate to remote code execution as
CVE-2026-21667 CRITICAL
9.9 Mar 12

A second RCE vulnerability in Veeam Backup & Replication allows any authenticated domain user to execute code on the Bac
CVE-2026-21666 CRITICAL
9.9 Mar 12

Veeam Backup & Replication allows an authenticated domain user to achieve remote code execution on the Backup Server. Wi
CVE-2026-21669 CRITICAL
9.9 Mar 12

Yet another Veeam Backup & Replication RCE vulnerability allowing authenticated domain users to execute code on the Back
CVE-2024-29212 CRITICAL
9.9 May 14

Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication betwee
CVE-2024-29849 CRITICAL
9.8 May 22

Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.

Same weakness CWE-287 – Improper Authentication

View all
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2023-35078 CRITICAL POC
9.8
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2022-43549 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy