CVE-2021-35971

Published: Jun 30, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting.

Affected (2)

Products: Veeam: Veeam Backup & Replication

Veeam

1 product

Veeam Backup & Replication

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Veeam Veeam Backup & Replication	From 10.0 to 10.0.1.4854
Veeam Veeam Backup & Replication	From 11.0 to 11.0.0.837

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (4)

https://www.veeam.com/kb4126

Source: cve@mitre.org

Release NotesVendor Advisory

https://www.veeam.com/kb4180

Source: cve@mitre.org

Release NotesVendor Advisory

https://www.veeam.com/kb4126

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://www.veeam.com/kb4180

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.