Loading vulnerability…
CVE-2024-42448 is a critical vulnerability in Veeam Service Provider Console (VSPC) that allows remote code execution on the VSPC server from a VSPC management agent machine, provided the management agent is authorized on the server. The issue affects VSPC 7.0.X, 8.0.X, and 8.1.X versions prior to 8.1.0.21999. Publicly available information indicates that a remote authenticated attacker with access to an authorized VSPC management agent can exploit the flaw to execute arbitrary code on the VSPC server. Detailed technical information about the specific vulnerable function or root cause has not been made available in the provided material.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No valid public exploits. Mallory filtered out 1 candidate as fakes, detection scripts, or README-only repos.
All candidate exploits were filtered out by Mallory's validation.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Critical remote code execution vulnerability in Veeam Service Provider Console (VSPC) that can be exploited by a remote authenticated attacker with access to VSPC management agents.
Critical Veeam Service Provider Console (VSPC) vulnerability that can lead to remote code execution on the VSPC server when a management agent is authorized, potentially granting full control of the server and accessible resources.
A critical vulnerability in Veeam Service Provider Console (VSPC) that allows an authorized/registered management agent to remove arbitrary files on the VSPC server.
A critical remote code execution (RCE) vulnerability in Veeam Service Provider Console (VSPC) that can allow code execution on the VSPC server from an authorized management agent machine.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.