{"cvss":9.8,"datePublished":"2024-10-17","dateUpdated":"2024-10-17","description":"Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.","dueDate":"2024-11-07","id":"CVE-2024-40711","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://www.veeam.com/kb4649 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40711","product":"Backup & Replication","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Veeam Backup and Replication Deserialization Vulnerability","vendor":"Veeam"}