Management Pack For Microsoft System Center
Monthly
Remote code execution as LocalSystem in the Veeam Management Pack for Microsoft System Center Collector service lets any authenticated domain user who can reach the Collector over the network run arbitrary code at the highest local privilege level on the host. Only the Collector role is affected, and only in Management Pack versions 9.0 through below 13.1.0.334; the CVSS vector (PR:L, AC:L, UI:N) confirms a low-complexity path that needs a valid domain account but no user interaction. Veeam has released a fixed build (13.1.0.334) and the issue is tracked as a this-week priority, but no public exploit code has been identified at time of analysis and there is no CISA KEV entry.
Remote code execution in the Veeam Management Pack for Microsoft System Center Collector service allows an authenticated member of the Veeam Virtualization Extensions Users group to run arbitrary code on affected Collector servers, with high confidentiality, integrity and availability impact and a scope change to subsequent systems. Exploitation requires user interaction and a specific attack precondition noted in the CVSS 4.0 vector, so opportunistic unauthenticated attacks are not indicated; installations at 13.1.0.334 or later are not affected. Vendor patching is available, and no public exploit or CISA KEV entry is identified in the provided intelligence.
Remote code execution as LocalSystem in the Veeam Management Pack for Microsoft System Center Collector service lets any authenticated domain user who can reach the Collector over the network run arbitrary code at the highest local privilege level on the host. Only the Collector role is affected, and only in Management Pack versions 9.0 through below 13.1.0.334; the CVSS vector (PR:L, AC:L, UI:N) confirms a low-complexity path that needs a valid domain account but no user interaction. Veeam has released a fixed build (13.1.0.334) and the issue is tracked as a this-week priority, but no public exploit code has been identified at time of analysis and there is no CISA KEV entry.
Remote code execution in the Veeam Management Pack for Microsoft System Center Collector service allows an authenticated member of the Veeam Virtualization Extensions Users group to run arbitrary code on affected Collector servers, with high confidentiality, integrity and availability impact and a scope change to subsequent systems. Exploitation requires user interaction and a specific attack precondition noted in the CVSS 4.0 vector, so opportunistic unauthenticated attacks are not indicated; installations at 13.1.0.334 or later are not affected. Vendor patching is available, and no public exploit or CISA KEV entry is identified in the provided intelligence.