{"id":"CVE-2024-42448","published":"2024-12-11T18:52:27Z","modified":"2024-12-12T14:42:44Z","title":"From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is…","vendor":"Veeam","product":"Service Provider Console","tier":"core","eol":null,"affectedVersions":[{"vendor":"Veeam","product":"Service Provider Console","versions":[">= 8.1, <= 8.1"]}],"description":{"text":"From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in Veeam's Service Provider Console (VSPC), where a weakness in the management agent's trust relationship with the VSPC server allows code generation to be improperly controlled. An attacker who controls a machine running the VSPC management agent that is authorized on the server can achieve remote code execution on the VSPC server, provided that agent is already authorized on the server and the attacker has low-privilege access to the agent host, with no user interaction required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:53:50Z"},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.20359,"percentile":0.9748,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2025-01-23","exploitedFirstSeen":"2025-01-23","ransomware":true,"evidence":[{"url":"https://insights.nccgroup.com/l/898251/2025-01-15/31km7v7/898251/1736933471Luh7mq1o/Dec_Monthly_Threat_Pulse_Freemium_V4.pdf","date":"2025-01-23"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://www.veeam.com/kb4679","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-39436","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-39436","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2024-12-05","earliestUrl":"https://github.com/h3lye/CVE-2024-42448-RCE","repos":[{"name":"h3lye/CVE-2024-42448-RCE","url":"https://github.com/h3lye/CVE-2024-42448-RCE","stars":0,"created":"2024-12-05"}]},"first":{"date":"2024-12-05","source":"PoC-in-GitHub","url":"https://github.com/h3lye/CVE-2024-42448-RCE"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-12-05","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/h3lye/CVE-2024-42448-RCE","provenance":"source"},{"date":"2024-12-11","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-42448","provenance":"source"},{"date":"2025-01-23","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://insights.nccgroup.com/l/898251/2025-01-15/31km7v7/898251/1736933471Luh7mq1o/Dec_Monthly_Threat_Pulse_Freemium_V4.pdf","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":76.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 645 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.5,"detail":"percentile 0.9748"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.93,"detail":"base score 9.9"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}