Veeam Management Pack: Remote code execution vulnerabilities

Multiple vulnerabilities have been identified in Veeam Management Pack for Microsoft System Center. These vulnerabilities allow a remote attacker to execute arbitrary code. The affected versions are all releases prior to 13.1 (build 13.1.0.334). Organizations should refer to the vendor security bulletin KB4961 for patch guidance.

Impact

Successful exploitation allows for remote arbitrary code execution, which may lead to full system compromise of the affected host.

Recommendation

• Update Veeam Management Pack for Microsoft System Center to version 13.1 (build 13.1.0.334) or later immediately as per Veeam security bulletin KB4961.
• Review network access logs for unusual inbound activity targeting the Veeam Management Pack service.
• Monitor logs for unauthorized process execution spawned by service accounts associated with System Center or Veeam services.