Skip to main content
Apexward Pulse

Cisco

Veeam Backup & Replication Cloud Connect Missing Authentication Vulnerability

CVE-2023-27532

What this means

This is rated high severity (7.5 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Veeam Veeam Backup \& Replication is in your estate, and treat that as the priority.

Full vendor description

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

Scoring and exploitation

7.5/ 10
CVSS 3.1 base scoreHigh

Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability

Longer bar: easier to attack

Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U

Impact

Longer bar: more harm

ConfidentialityHighC:H
IntegrityNoneI:N
AvailabilityNoneA:N
Elevated attack likelihood (~80.6% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Yes — confirmed exploitation (US CISA )
Known
Listed product
Veeam Backup & Replication

Weaknesses

CWE-306

Affected products ()

  • Veeam Veeam Backup \& Replication
Show the raw CPE strings (6)
  • cpe:2.3:a:veeam:veeam_backup_\&_replication:*:*:*:*:*:*:*:*
  • cpe:2.3:a:veeam:veeam_backup_\&_replication:11.0.1.1261:-:*:*:*:*:*:*
  • cpe:2.3:a:veeam:veeam_backup_\&_replication:11.0.1.1261:p20211123:*:*:*:*:*:*
  • cpe:2.3:a:veeam:veeam_backup_\&_replication:11.0.1.1261:p20211211:*:*:*:*:*:*
  • cpe:2.3:a:veeam:veeam_backup_\&_replication:11.0.1.1261:p20220302:*:*:*:*:*:*
  • cpe:2.3:a:veeam:veeam_backup_\&_replication:12.0.0.1420:-:*:*:*:*:*:*

References

3 links from the CVE record, grouped by site; the vendor's advisory comes first.

Related feed events

  • Cisco ASA and FTD Information Disclosure Vulnerability

    Type Vulnerability

    CVE-2020-3259 is confirmed as exploited in the wild (US known-exploited catalogue) CVE-2020-3259 has an estimated ~71.8% chance of attack in 30 days (99.4th percentile) as of 2026-10-20 — probability…

    Next step: Confirm whether Cisco Secure Firewall Threat Defense is in your estate.

    Who's reporting

    1 of 3 perspectives

    Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal

    Only official coverage so far. Treat as an early signal.

    Cisco Secure Firewall Threat Defense
    CVE-2020-3259+4