CVE-2025-23120

Thursday, March 20, 2025

9.9

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Summary

A vulnerability allowing remote code execution (RCE) for domain users.

Affected Software

Vendor	Product	Version Range	Status
Veeam	Backup and Recovery	`12.3 <= 12.3`	affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: total

Additional References

https://labs.watchtowr.com/by-executive-order-we-are-banning-blacklists-domain-level-rce-in-veeam-backup-replication-cve-2025-23120/

References

https://www.veeam.com/kb4724

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.