exploit/windows/misc/veeam_one_agent_deserialization

functional

Veeam ONE Agent .NET Deserialization

view exploit source metasploittype exploitpublished 2020-04-15catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-10915US	critical9.8	86.6% (100th)	Exploit	2020-04-22
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Authentication is not required to exploit this vulnera…
CVE-2020-10914US	critical9.8	47.9% (99th)	Exploit	2020-04-22
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Authentication is not required to exploit this vulnera…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.