Vulnerabilities > CVE-2020-15518 - Missing Authorization vulnerability in Veeam products
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |