CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently, allowing the attacker to execute harmful code. This could lead to unauthorized access, data theft, or disruption of services

• CWE-426

• https://www.veeam.com/kb4693Vendor Advisory

Published

Dec 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45200In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN lo…6.3
• CVE-2024-45201An issue was discovered in llama_index before 0.10.38. downl…8.8
• CVE-2024-45203Improper authorization in handler for custom URL scheme issu…4.3
• CVE-2024-45204A vulnerability exists where a low-privileged user can explo…4.3
• CVE-2024-45205An Improper Certificate Validation on the UniFi iOS App mana…7.1
• CVE-2024-45206A vulnerability in Veeam Service Provider Console has been i…6.5
• CVE-2024-45208The Versa Director SD-WAN orchestration platform which makes…9.8
• CVE-2024-4521A vulnerability classified as problematic has been found in …6.1
• CVE-2024-45216Improper Authentication vulnerability in Apache Solr. Solr …9.8
• CVE-2024-45217Insecure Default Initialization of Resource vulnerability in…8.1
• CVE-2024-45219Account users in Apache CloudStack by default are allowed to…8.5
• CVE-2024-4522A vulnerability classified as problematic was found in Campc…6.1