CVE-2024-45206
UnknownEPSS 0.24%
Last modified
CVE-2024-45206 is a vulnerability of currently unknown severity. A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Veeam | Veeam Service Provider Console | >= 7.0.0.12777, < 8.1.0.21377 |
References
- https://www.veeam.com/kb4649Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-45206?
A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.
How severe is CVE-2024-45206?
Severity scoring for CVE-2024-45206 is pending analysis. The EPSS model estimates a 0.24% probability of exploitation in the next 30 days.
How do I fix CVE-2024-45206?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2024-45206?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST