Veeam Agent for Microsoft Windows Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Veeam Agent for Microsoft Windows, specifically in version 6.3.2.1205 and earlier. This vulnerability allows a system administrator to be tricked into restoring a malicious file, potentially leading to unauthorized access or elevated privileges.

Impact

Exploitation of this vulnerability could allow an attacker to gain elevated privileges on the affected system, potentially leading to unauthorized access or control.

Remediation

Users can upgrade to Veeam Agent for Microsoft Windows version 6.3.2.1302 to address this vulnerability. This version is available as a standalone application and included with Veeam Backup & Replication.