1.0 Introduction
Recently, Veeam has released security updates to address a critical vulnerability (CVE-2025-64393) affecting Veeam Backup & Replication.
2.0 Impact
Successful exploitation of this vulnerability may allow an attacker with the Backup Viewer role to perform remote code execution on the Veeam Backup Server through insecure deserialization of untrusted data received via the Mount Service. Code executes with SYSTEM privileges. Backup servers are a common ransomware target, so exploitation may lead to system compromise and the loss or tampering of backup data.
3.0 Affected Products
- Veeam Backup & Replication versions 12 through 12.3.2.4854
4.0 Recommendation
CyberSecurity
Malaysia encourages users and administrators to review the following Veeam
security advisory and apply the necessary updates. Users are advised to update
to Veeam Backup & Replication 12.3.2 P4 (build 12.3.2.4934) or later.
Administrators should also review accounts holding the Backup Viewer role and
remove any that are not required.
Kindly refer to the following URL:
Generally, we advise users to be
updated with the latest security announcements by the vendor and follow best
practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999
Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my
5.0 References