{"id":"CVE-2020-10915","published":"2020-04-22T20:51:07Z","modified":"2024-08-04T11:14:15Z","title":"This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent…","vendor":"VEEAM","product":"One Agent","tier":"core","eol":null,"affectedVersions":[{"vendor":"VEEAM","product":"One Agent","versions":["9.5.4.4587"]}],"description":{"text":"This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HandshakeResult method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-10401.","provenance":"source","from":"CVE.org"},"summary":{"text":"A deserialization flaw in the HandshakeResult method of VEEAM One Agent 9.5.4.4587 lets untrusted input be processed without proper validation. An attacker with network access can exploit it without authentication or user interaction to execute arbitrary code in the context of the service account.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:20Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.86619,"percentile":0.99738,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-502","name":"Deserialization of Untrusted Data"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-546/","tags":["x_refsource_MISC"]},{"url":"https://www.veeam.com/kb3144","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/157529/Veeam-ONE-Agent-.NET-Deserialization.html","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2020-3321","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3321","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2021-10-20","earliestUrl":"https://github.com/Cinnamon1212/Modified-CVE-2020-10915-MsfModule","repos":[{"name":"Cinnamon1212/Modified-CVE-2020-10915-MsfModule","url":"https://github.com/Cinnamon1212/Modified-CVE-2020-10915-MsfModule","stars":0,"created":"2021-10-20"}]},"metasploit":[{"name":"Veeam ONE Agent .NET Deserialization","module":"exploit/windows/misc/veeam_one_agent_deserialization","type":"exploit","disclosureDate":"2020-04-15","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeam_one_agent_deserialization.rb"}],"first":{"date":"2020-04-15","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeam_one_agent_deserialization.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/157529/Veeam-ONE-Agent-.NET-Deserialization.html"],"flow":[],"timeline":[{"date":"2020-04-15","kind":"exploit-public","label":"First public exploit: Metasploit; later: PoC-in-GitHub 2021-10-20","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeam_one_agent_deserialization.rb","provenance":"source"},{"date":"2020-04-22","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2020-10915","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":31.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.95,"detail":"percentile 0.9974"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD exploit link; 1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}