CVE-2023-27532β€”Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

PUBLISHEDvulnerability record
2023-08-22 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2023-27532
Project:
Veeam
Product:
Backup & Replication
Date Added:
2023-08-22
Due Date:
2023-09-12
Last Updated:
June 21, 2025

Vulnerability Name

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Description

Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

  • https://www.veeam.com/kb4424
  • https://nvd.nist.gov/vuln/detail/CVE-2023-27532

Related News Articles

Related Weaknesses

browse all CVEs