1. Home
  2. CVE Database
  3. CVE-2024-45207
HIGH · 7.0

CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker plac...

Vulnerability Description

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently, allowing the attacker to execute harmful code. This could lead to unauthorized access, data theft, or disruption of services

CVSS Score

7.0

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
VeeamVeeam Agent For Windows>= 6.0.0.959, < 6.3.0.177

Related Weaknesses (CWE)

CWE-426

References

FAQ

What is CVE-2024-45207?

CVE-2024-45207 is a vulnerability with a CVSS score of 7.0 (HIGH). DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker plac...

How severe is CVE-2024-45207?

CVE-2024-45207 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-45207?

Check the references section above for vendor advisories and patch information. Affected products include: Veeam Veeam Agent For Windows.