Veeam Backup & Replication Windows Driver Signature Enforcement Bypass Vulnerability

A vulnerability exists in Veeam Backup & Replication versions 12, 12.1, 12.2, 12.3, 12.3.1, and 12.3.2, as well as version 13.0.1.1071. This vulnerability allows a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement, potentially leading to the installation of unsigned drivers or manipulation of driver behavior.

Impact

Exploitation of this vulnerability could allow for the installation of unsigned drivers or manipulation of driver behavior, which could be leveraged for malicious purposes, such as executing unauthorized code or creating persistent backdoors.

Remediation

This vulnerability has been fixed in Veeam Backup & Replication versions 12.3.2.4465 and 13.0.1.2067.