Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Veeam | Service Provider Console | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-39885 | From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbitrary files on the VSPC server machine. |
| Link | Providers |
|---|---|
| https://www.veeam.com/kb4679 |
|
Thu, 13 Mar 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-732 |
Mon, 09 Dec 2024 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Veeam
Veeam service Provider Console |
|
| CPEs | cpe:2.3:a:veeam:service_provider_console:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Veeam
Veeam service Provider Console |
|
| Metrics |
ssvc
|
Wed, 04 Dec 2024 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbitrary files on the VSPC server machine. | |
| References |
| |
| Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: hackerone
Published:
Updated: 2025-03-13T14:54:19.282Z
Reserved: 2024-08-02T01:04:07.984Z
Link: CVE-2024-42449
Vulnrichment
Updated: 2024-12-09T14:19:29.993Z
NVD
Status : Deferred
Published: 2024-12-04T02:15:04.533
Modified: 2026-04-15T00:35:42.020
Link: CVE-2024-42449
Redhat
No data.
OpenCVE Enrichment
No data.