CVE-2024-29853: An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation.

7.8 CVSS

Description

An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation.

Classification

CVE ID: CVE-2024-29853

CVSS Base Severity: HIGH

CVSS Base Score: 7.8

Affected Products

Vendor: Veeam

Product: Agent for Windows

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.44% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://veeam.com/kb4582

Timeline