Live › vulnerability › CVE-2023-22793
An unauthenticated attacker can run code remotely on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center. Veeam rates it Critical (CVSS v4.0 9.3); found in internal testing. Fixed only in 13.1.0.334.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 23:27 UTC. All times on this page are UTC.
Organizations running Veeam Management Pack for Microsoft System Center with the Veeam Virtualization Extensions service enabled. The sources do not state specific affected versions or other conditions, so the exact exposure is unknown.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Veeam Management Pack for Microsoft System Center | vendor | <= 9.1 (all 9.x builds) | 13.1.0.334 |
9.1.0.3107 or earlier) is affected; is fixed13.1.0.33413.1.0.334)9.1.0.3107)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.
This page as .md · .json · in your agent: get_signal("CVE-2023-22793")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.