« Volver al listado

CVE-2025-23114

Estado: AplazadaCrítica (9)—

A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:N sin PR, pero CWE-295 (validación TLS) en componente updater expone a MITM: T1557. Ejecución de código arbitrario (C:H/I:H) y escalada potencial en servidor afectado.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Execution PreventionDisable or Remove Feature or ProgramUser TrainingThreat Intelligence ProgramRestrict Web-Based ContentPrivileged Account Management

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Veeam — UpdaterAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-23114",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-23114",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-05T14:47:20.649153Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "support@hackerone.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "support@hackerone.com",
      "affectedData": [
        {
          "vendor": "Veeam",
          "product": "Backup for AWS",
          "versions": [
            {
              "status": "affected",
              "version": "7.0",
              "versionType": "semver",
              "lessThanOrEqual": "7.0"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Veeam",
          "product": "Backup for Microsoft Azure",
          "versions": [
            {
              "status": "affected",
              "version": "6.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.0"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Veeam",
          "product": "Backup for Google Cloud",
          "versions": [
            {
              "status": "affected",
              "version": "5.0",
              "versionType": "semver",
              "lessThanOrEqual": "5.0"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Veeam",
          "product": "Backup for Nutanix AHV",
          "versions": [
            {
              "status": "affected",
              "version": "5.1",
              "versionType": "semver",
              "lessThanOrEqual": "5.1"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Veeam",
          "product": "Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization",
          "versions": [
            {
              "status": "affected",
              "version": "4.1",
              "versionType": "semver",
              "lessThanOrEqual": "4.1"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Veeam",
          "product": "Backup for Salesforce",
          "versions": [
            {
              "status": "affected",
              "version": "3.1",
              "versionType": "semver",
              "lessThanOrEqual": "3.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-02-05T02:15:28.610",
  "references": [
    {
      "url": "https://www.veeam.com/kb4712",
      "source": "support@hackerone.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el componente Veeam Updater permite a los atacantes de tipo Man-in-the-Middle ejecutar código arbitrario en el servidor afectado. Este problema se produce debido a una falla en la validación correcta del certificado TLS."
    }
  ],
  "lastModified": "2026-06-17T08:52:07.273",
  "sourceIdentifier": "support@hackerone.com"
}