HomeVeeamCVE-2024-42022

CVE-2024-42022

MEDIUM
5.3CVSS
Published: 2024-09-07
Updated: 2025-04-28
AI Analysis

Description

An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.

CVSS Metrics

Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
network
Complexity
low
Privileges
none
User Action
none
Scope
unchanged
Confidentiality
none
Integrity
low
Availability
none
Weaknesses
NVD-CWE-noinfoCWE-284

Metadata

Primary Vendor
VEEAM
Published
9/7/2024
Last Modified
4/28/2025
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

veeam : one

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief