CVE-2024-42024

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-250

Affected software

No affected versions have been published.

Timeline

Published: Sep 7, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-420257.8A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and ea CVE-2024-420276.7The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they hav CVE-2024-420288.8A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and ea CVE-2024-420296.3xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e.g., because single CVE-2024-42035.4The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maps widget in all versions u CVE-2024-420306.2Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may CVE-2024-420317.5Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect servic CVE-2024-420325.5Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-420337.1Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity CVE-2024-420345.5LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentiality CVE-2024-420357.8Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality CVE-2024-420367.5Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service