Cpe:2.3:a:veeam:management_pack_for_microsoft_system_center:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aveeammanagement_pack_for_microsoft_system_center/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 21:19:54 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgVeeam Management Pack: Remote code execution vulnerabilitieshttps://feed.craftedsignal.io/briefs/2026-10-veeam-management-pack-vulns/Fri, 30 Oct 2026 21:19:54 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-veeam-management-pack-vulns/Multiple vulnerabilities in Veeam Management Pack for Microsoft System Center allow remote attackers to achieve arbitrary code execution on affected systems.Multiple vulnerabilities have been identified in Veeam Management Pack for Microsoft System Center. These vulnerabilities allow a remote attacker to execute arbitrary code. The affected versions are all releases prior to 13.1 (build 13.1.0.334). Organizations should refer to the vendor security bulletin KB4961 for patch guidance.

Impact

Successful exploitation allows for remote arbitrary code execution, which may lead to full system compromise of the affected host.

Recommendation

  • Update Veeam Management Pack for Microsoft System Center to version 13.1 (build 13.1.0.334) or later immediately as per Veeam security bulletin KB4961.
  • Review network access logs for unusual inbound activity targeting the Veeam Management Pack service.
  • Monitor logs for unauthorized process execution spawned by service accounts associated with System Center or Veeam services.
]]>highadvisoryvulnerabilityrceenterprise-software