CVE-2023-22793
CriticalCVSS 9.3Summary
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.
Risk Assessment
An unauthenticated attacker could take control of the server, leading to full compromise of confidentiality, integrity and availability of the infrastructure.
Recommendation
Immediately update Veeam Management Pack for Microsoft System Center to a patched version and restrict network access to the Veeam Virtualization Extensions service.
Other vulnerabilities in Veeam Management Pack for Microsoft System Center
See all- CVE-2026-107239High
A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.
- CVE-2026-107238High
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Original NVD description (English source)
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS