BugZero | Veeam BugID kb4376 - Access to Hyper-V or Veeam B&R Components Fails Af...

Veeam - Defect ID: kb4376

Access to Hyper-V or Veeam B&R Components Fails After DCOM Hardening is Enabled

Veeam - Defect ID: kb4376

Access to Hyper-V or Veeam B&R Components Fails After DCOM Hardening is Enabled

Last updated on January 24th, 2025

BugZero Risk Score
9.9 High

Overall: 9.9

Severity: 10.0

Community: 9.3

What is the BugZero Risk Score?

Veeam Integration

Learn more about where this data comes from

Veeam Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 18

Description

Challenge

After June 14, 2022, DCOM connections to Hyper-V, Veeam Backup & Replication, and other Windows-based servers may be impacted by the DCOM hardening policy activated after the deployment of the Microsoft CVE-2021-26414 security update. Below are examples of errors that may be shown by Veeam products affected by this:This list of examples errors is not exhaustive, others may exist. It is critical to focus on checking for Windows Event ID 10036. Veeam Backup & Replication — operations involving Hyper-V infrastructure may fail with the error: Failed to call RPC function 'HviCreateVmRecoverySnapshot' Failed to connect to cluster <clustername> Failed to create Hyper-V Cluster Wmi utils: Access denied or timeout expired. Check if you have local administrator privileges on computer '<clustername>'. Possible reason: Specified host is not a cluster node. Failed to connect to host vmhost2 Access denied or timeout expired. Check if you have local administrator privileges on computer '<hostname>'. Possible reasons: 1. Invalid credentials. 2. Specified host is not a Hyper-V server.

Cause

The situation is caused by the Microsoft Windows DCOM connections hardening. Shown below is Microsoft's timeline for deployment of this new hardening policy.

Solution

All Veeam products are ready for this DCOM change and use Packet Integrity DCOM authentication; the underlying Windows OS must be updated to support this change. To resolve these issues, ensure all Windows-based servers have installed the DCOM Hardening update. See the list at the bottom of this article: KB5004442—Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414). The updates listed on that page may have been rolled in to future updates, check Windows DCOM Server Security Feature Bypass CVE-2021-26414 for more information. Notes: These updates may be listed as optional and may have been ignored by Windows or WSUS systems. In such a situation, the update must be deployed manually. This issue may affect older Windows operating system, but the update to resolve the issue may not be available without ESU. For environments where Veeam Backup & Replication was deployed on an older operating system no longer supported by the latest version of Veeam Backup & Replication (e.g., Server 2008 R2), please review: KB1803: How to Upgrade Legacy Veeam Backup Server

Change history

2025-01-24 Added: Veeam Management Pack 8.0, Veeam Management Pack 6.5, Veeam Management Pack 6.0, Veeam Management Pack 7.0, Veeam Management Pack 5.6, Veeam Management Pack 9a, Veeam Management Pack 9.0, Veeam Management Pack 5.7

2025-01-24 Removed: ALL

2025-01-24 Added: 5.0, 3.0.2, 2.0, 2.1, 6.1, 4.0, 6.3.2, 6.3.3, 6.2, 6.0, 2.2, 13, 6.3, 6.3.1

2025-01-24 Removed: ALL

2025-01-24 Added: 6.3.1, 3.0.2, 2.1, 6.3.3, 6.1, 6.0, 6.3.2, 5.0, 2.2, 2.0, 4.0, 6.2, 6.3, 13

2025-01-24 Removed: ALL

2025-01-24 Added: Veeam Management Pack 5.6, Veeam Management Pack 9a, Veeam Management Pack 9.0, Veeam Management Pack 7.0, Veeam Management Pack 6.5, Veeam Management Pack 8.0, Veeam Management Pack 5.7, Veeam Management Pack 6.0

2025-01-24 Removed: ALL

2025-01-24 Added: 10, 13, 11, 7.0, 12.1, 6.0, 9.0, 12.3, 12.2, 8.0, 9.5, 6.5, 12

2025-01-24 Removed: ALL

2025-01-24 Added: Veeam Disaster Recovery Orchestrator 5.0, 7.0, Veeam Availability Orchestrator 1.0, 7.2, 6.0, 13, Veeam Availability Orchestrator 4.0, Veeam Availability Orchestrator 2.0, 7.2.1, Veeam Availability Orchestrator 3.0, 7.1

2025-01-24 Removed: ALL

2025-01-24 Added: 9.5, 12.1, 12.3.1, 13, 12, 8.0, 6.5, 11, 9.0, 6.1, 5.0, 7.0, 12.3.2, 10, 12.3, 12.2

2025-01-24 Removed: ALL

2025-01-24 Added: 3.0.2, 4.0, 13, 6.3.1, 2.0, 6.0, 5.0, 6.1, 2.2, 6.2, 2.1, 6.3, 6.3.2, 6.3.3

2025-01-24 Removed: ALL

2025-01-24 Added: 12.3.1, 6.1, 11, 12.3.2, 9.0, 12.3, 7.0, 13, 12.1, 8.0, 6.5, 5.0, 12, 10, 9.5, 12.2

2025-01-24 Removed: ALL

2025-01-24 Added: 6.2, 2.1, 6.1, 13, 6.3, 6.3.2, 5.0, 2.0, 6.0, 4.0, 2.2, 6.3.3, 3.0.2, 6.3.1

2025-01-24 Removed: ALL

2025-01-24 Added: 13, Veeam Availability Orchestrator 4.0, Veeam Availability Orchestrator 1.0, 7.1, Veeam Availability Orchestrator 3.0, 7.0, 6.0, Veeam Availability Orchestrator 2.0, 7.2.1, 7.2, Veeam Disaster Recovery Orchestrator 5.0

2025-01-24 Removed: ALL

2025-01-24 Added: 13, 10, 9.0, 7.0, 6.5, 12.2, 12.3, 12.1, 11, 9.5, 8.0, 12, 6.0

2025-01-24 Removed: ALL

2025-01-24 Added: 7.0, 12.1, 10, 9.0, 12, 11, 8.0, 6.0, 6.5, 12.2, 9.5, 12.3, 13

2025-01-24 Removed: ALL

2025-01-24 Added: 10, 12.1, 6.0, 12.2, 8.0, 12.3, 7.0, 13, 6.5, 12, 11, 9.0, 9.5

2025-01-24 Removed: ALL

2025-01-24 Added: 2.1, 6.3.2, 6.2, 6.0, 5.0, 13, 6.3.3, 6.3, 2.2, 3.0.2, 6.1, 4.0, 2.0, 6.3.1

2025-01-24 Removed: ALL

2025-01-24 Added: 9.5, 6.5, 12, 12.3, 11, 6.0, 8.0, 9.0, 10, 13, 12.1, 12.2, 7.0

2025-01-24 Removed: ALL

2025-01-24 Added: 13, 7.0, Veeam Disaster Recovery Orchestrator 5.0, Veeam Availability Orchestrator 3.0, Veeam Availability Orchestrator 4.0, Veeam Availability Orchestrator 1.0, 6.0, Veeam Availability Orchestrator 2.0, 7.1, 7.2, 7.2.1

2025-01-24 Removed: ALL

2025-01-24 Added: 7.1, 6.0, Veeam Availability Orchestrator 1.0, Veeam Availability Orchestrator 3.0, 7.2, 7.2.1, 7.0, Veeam Availability Orchestrator 4.0, 13, Veeam Disaster Recovery Orchestrator 5.0, Veeam Availability Orchestrator 2.0

2025-01-24 Removed: ALL

2025-01-24 Added: 11, 9.0, 7.0, 9.5, 12.3.2, 6.5, 10, 8.0, 12.2, 12.1, 13, 12.3.1, 12.3, 12, 6.1, 5.0

2025-01-24 Removed: ALL

2025-01-24 Added: Veeam Management Pack 9a, Veeam Management Pack 9.0, Veeam Management Pack 6.0, Veeam Management Pack 5.7, Veeam Management Pack 7.0, Veeam Management Pack 5.6, Veeam Management Pack 8.0, Veeam Management Pack 6.5

2025-01-24 Removed: ALL

2025-01-24 Added: 12.2, 12.3, 8.0, 12.1, 9.0, 6.0, 7.0, 10, 11, 12, 13, 9.5, 6.5

2025-01-24 Removed: ALL

2025-01-24 Added: 6.3.2, 2.2, 13, 2.1, 6.0, 6.2, 5.0, 4.0, 6.3, 2.0, 3.0.2, 6.1, 6.3.1, 6.3.3

2025-01-24 Removed: ALL

2025-01-24 Added: 13, 12.3, 9.5, 11, 10, 6.0, 8.0, 12.1, 12, 6.5, 12.2, 9.0, 7.0

2025-01-24 Removed: ALL

2025-01-24 Added: 6.3.1, 6.3.2, 2.0, 6.1, 6.3, 5.0, 4.0, 2.1, 2.2, 6.2, 3.0.2, 6.3.3, 6.0, 13

2025-01-24 Removed: ALL

2025-01-24 Added: 10, 8.0, 12.3, 12.2, 11, 7.0, 6.5, 12.1, 6.0, 9.5, 13, 12, 9.0

2025-01-24 Removed: ALL

2025-01-24 Added: 2.1, 6.3, 3.0.2, 6.0, 4.0, 6.1, 6.3.1, 13, 5.0, 2.2, 6.2, 6.3.2, 6.3.3, 2.0

2025-01-24 Removed: ALL

2025-01-24 Added: 10, 12.2, 13, 12, 12.3, 6.5, 7.0, 9.5, 12.1, 11, 9.0, 8.0, 6.0

2025-01-24 Removed: ALL

2025-01-24 Added: Veeam Availability Orchestrator 3.0, 7.0, 7.2.1, Veeam Availability Orchestrator 1.0, 7.1, 6.0, Veeam Availability Orchestrator 2.0, 13, Veeam Disaster Recovery Orchestrator 5.0, 7.2, Veeam Availability Orchestrator 4.0

2025-01-24 Removed: ALL

2025-01-24 Added: 12.1, 9.0, 8.0, 6.0, 10, 13, 12.2, 11, 6.5, 12.3, 7.0, 9.5, 12

2025-01-24 Removed: ALL

2025-01-24 Added: Veeam Availability Orchestrator 3.0, 7.2, Veeam Disaster Recovery Orchestrator 5.0, 7.0, Veeam Availability Orchestrator 4.0, 7.1, 6.0, 7.2.1, Veeam Availability Orchestrator 1.0, Veeam Availability Orchestrator 2.0, 13

2025-01-24 Removed: ALL

2025-01-24 Added: 8.0, 6.1, 7.0, 5.0, 10, 6.5, 12.3.2, 12, 12.3, 12.1, 12.2, 12.3.1, 13, 11, 9.0, 9.5

2025-01-24 Removed: ALL

2025-01-24 Added: 5.0, 8.0, 12.3.2, 11, 6.1, 13, 10, 12.3.1, 12, 9.5, 9.0, 7.0, 6.5, 12.2, 12.3, 12.1

2025-01-24 Removed: ALL

2025-01-24 Added: 6.5, 9.0, 9.5, 12.1, 7.0, 11, 13, 8.0, 12.3, 12, 6.0, 12.2, 10

2025-01-24 Removed: ALL

2025-01-24 Added: Veeam Management Pack 8.0, Veeam Management Pack 6.0, Veeam Management Pack 5.6, Veeam Management Pack 6.5, Veeam Management Pack 9a, Veeam Management Pack 9.0, Veeam Management Pack 5.7, Veeam Management Pack 7.0

2025-01-24 Removed: ALL

2025-01-24 Added: 6.5, 12, 12.3, 12.3.1, 9.0, 12.2, 7.0, 9.5, 8.0, 13, 11, 5.0, 10, 12.1, 12.3.2, 6.1

2025-01-24 Removed: ALL

2025-01-24 Added: ALL

Relevant Products

Click on a version to see all relevant bugs

Affected versions:Veeam Management Pack 8.0, Veeam Management Pack 6.5, Veeam Management Pack 6.0, Veeam Management Pack 7.0, Veeam Management Pack 5.6, Veeam Management Pack 9a, Veeam Management Pack 9.0, Veeam Management Pack 5.7

Fixed versions: No known fixed versions

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: No known fixed versions

Top Veeam Defects

9.9Defect ID: kb4820
Support Statement — Exchange Web Services (EWS) Deprecation
9.8Defect ID: kb4495
Rescan of Windows Machine in Protection Group Fails With "The network path was not found."
9.8Defect ID: kb4845
OAuth interaction_required Error in Veeam Backup & Replication Console After Veeam Software Appliance Update
9.8Defect ID: kb4833
How to Manually Update GPG key on Veeam Hardened Repository Appliance
9.8Defect ID: kb3215
Error "Failed to establish connection to Amazon S3 endpoint" or "Azure Cloud connection has returned an untrusted certificate."

Ready to prevent the next vendor outage?

Get a demo

Veeam - Defect ID: kb4376

Access to Hyper-V or Veeam B&R Components Fails After DCOM Hardening is Enabled

Veeam - Defect ID: kb4376

Access to Hyper-V or Veeam B&R Components Fails After DCOM Hardening is Enabled

Last updated on January 24th, 2025

BugZero Risk Score9.9 High

Bug Details

Challenge

Cause

Solution

Top Veeam Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
9.9 High