CVE-2024-29212 Information

Description

Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management agent and its components under certain conditions it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.

Reference

https://www.veeam.com/kb4575

Share on: