Loading...
Loading...
CVE-2025-23120 A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. Severity: CriticalCVSS v3.1 Score: 9.9AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HSource: Reported by Piotr Bazydlo of watchTowr.
The vulnerability documented in this section was fixed starting in the following build:
Vulnerability Hotfix for Veeam Backup & Replication 12.3 For existing deployments of Veeam Backup & Replication 12.3 (build 12.3.0.310), a hotfix to resolve this vulnerability has been developed and is intended for customers who cannot immediately update to version 12.3.1. For deployments operating of Veeam Backup & Replication lower than 12.3.0.310, please upgrade directly to version 12.3.1. Note: This hotfix can only be installed if Veeam Backup & Replication 12.3 has no other hotfixes installed, as it may overwrite earlier hotfixes. If other hotfixes for version 12.3 have been installed, the deployment must be updated to 12.3.1. download hotfix for 12.3 This hotfix is only compatible with Veeam Backup & Replication 12.3 (build 12.3.0.310). Filename: VeeamBackup&Replication_12.3.0.310_KB4724.zip MD5: 5185235DEA2AC9F2814638534B16A6DB SHA1: 4B1C3A7F2F051D958EAF363E2739B1B38C4A4F8C This hotfix does not change the build number of the software. To validate that the hotfix has been deployed, compare the hash value of the files present on the system with the known hash value of the hotfix files. Veeam.Backup.Common.dll — SHA1: F81B62807D82D9648733B1BF5AD70172B6CB19AA Veeam.Backup.EsxManager.dll — SHA1: 9D72DD7E5CBE920454E7508AAF328CD1A59197E0 The following PowerShell commands can be used to check the SHA1 hash value of a given file.Note: These commands check the dll in its default location, the path may need to adjusted if Veeam Backup & Replication was installed to a different drive or folder. Get-FileHash -Path 'C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Common.dll' -Algorithm SHA1 Copy Get-FileHash -Path 'C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.EsxManager.dll' -Algorithm SHA1 Copy
Veeam Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.