---
id: "CVE-2023-22793"
kind: "vulnerability"
aliases: ["CVE-2023-22793"]
title: "Veeam Management Pack: unauthenticated remote code execution on servers"
severity: "critical"
cvss: 9.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Veeam Management Pack for Microsoft System Center", "fixed": ["13.1.0.334"], "affected": "<= 9.1 (all 9.x builds)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["microsoft-system-center", "scom", "self-hosted", "veeam", "vendor", "windows"]
not_affected_if: ["management-pack-13.1.0.334-installed", "not-installed", "service-not-installed"]
published_at: "2026-10-29T23:16:54+00:00"
first_seen_at: "2026-10-29T23:27:17+00:00"
updated_at: "2026-10-29T23:30:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22793", "first_seen_at": "2026-10-29T23:27:17+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-29T23:30:25+00:00"}]
---

# Veeam Management Pack: unauthenticated remote code execution on servers

An unauthenticated attacker can run code remotely on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center. Veeam rates it Critical (CVSS v4.0 9.3); found in internal testing. Fixed only in 13.1.0.334.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Veeam Management Pack for Microsoft System Center affected <= 9.1 (all 9.x builds) fixed 13.1.0.334

## How to check

In the Operations Manager console, Administration > Management Packs, check the Veeam MP version/build. Any 9.x build (9.1.0.3107 or earlier) is affected; 13.1.0.334 is fixed. Also check any server running the Veeam Virtualization Extensions service, including remote collectors.

## Fix

Upgrade Veeam Management Pack for Microsoft System Center to 13.1 (build 13.1.0.334). No fix will be released for 9.x; upgrade to 13.1 is supported only from 9a (build 9.1.0.3107).

## Timeline

- 2026-10-29T23:27:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-22793
- 2026-10-29T23:30:25+00:00 analyst — Veeam KB4961 (read directly): affects MP 9.1 and all 9.x builds incl. VBR 13 compat patch; fixed in 13.1.0.334; no 9.x fix. Critical CVSS v4 9.3, unauthenticated. No exploitation or PoC seen in vendor text; not searched socially (B tier).

## Documents

- [advisory] KB4961: Vulnerabilities Resolved in Veeam Management Pack 13.1 https://www.veeam.com/kb4961
- [fix] KB4949: Release Information for Veeam Management Pack 13.1 https://www.veeam.com/kb4949

## From the sources

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_