Veeam Backup Enterprise Manager Vulnerability
(CVE-2024-40715)

Thank you for sharing this information. My question here did you face vulnerability in Veeam Backup Enterprise Manager.

Thanks for posting this one Marco.  I am going to investigate it and see what is required for patching it.

@Chris.Childerhose once complete pease share with us your investigation. 

I hope so your investigation will helpful for us.

Looks like just a .dll file is being patched:

• Veeam.Backup.Enterprise.Core.dll

So pretty straight forward. 

To verify patch, run the following as per the KB 

Get-FileHash -Path 'C:\Program Files\Veeam\Backup and Replication\Enterprise Manager\Veeam.Backup.Enterprise.Core.dll' -Algorithm SHA1

The hash should be: FDC176FCE4825023F14462A51541C1DF591B28AC

If not, you are vulnerable.

The patch is very fast at install.  Only affects two services for VEM.

Tks @MarcoLuvisi and @dips for the information!

That webpage has disappeared.

can confirm this. Yesterday it was available, i did a download on a customer installation. Has anyone more information why the KB is not online anymore, or is it a temporary problem?
Thanks Markus

Same here tired to get to the download page and its not working, any updates?

It’s available again