CVE-2025-23114

Publication date

2025-02-05 01:45:03

Family

hackerone

State

PUBLISHED

Description

A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.