Veeam Backup & Replication Audit – September 2024

Discover Vulnerable Veeam Back-up & Replication Installs in Your Network

Veeam has released security updates for 6 of its products addressing 18 vulnerabilities, 6 of which are in Veeam Backup & Replication. All of these vulnerabilities have a high or critical severity rating (CVSS: 7.8 – 9.8) and could significantly compromise the integrity of your data and operations. The most severe of the issues addressed is a remote code execution vulnerability tracked as CVE-2024-40711. You can find more details in our Veeam Vulnerability Blog.

To help you locate any vulnerable Veeam Backup & Replication installations, the report below will provide you with an overview of all affected installs that you still need to update. This way you have an actionable list of installs that need your intervention.

Run the Veeam Backup & Replication (September 2024) Vulnerability Audit Report Now!

Veeam Backup & Replication Vulnerability Audit Lansweeper On-Prem Query

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.Version,
tblAssets.SP,
tblSoftwareUni.softwareName,
tblSoftwareUni.SoftwarePublisher,
tblSoftware.softwareVersion,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 12 Then 'Safe'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 12 And
Cast(ParseName(tblSoftware.softwareVersion, 3) As int) > 2 Then 'Safe'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 12 And
Cast(ParseName(tblSoftware.softwareVersion, 3) As int) = 2 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 0 Then 'Safe'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 12 And
Cast(ParseName(tblSoftware.softwareVersion, 3) As int) = 2 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 0 And
Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 334 Then 'Safe'
Else 'Vulnerable'
End As [Vulnerable/Safe],
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblSoftware.AssetID = tblAssets.AssetID
Inner Join dbo.tblSoftwareUni On tblSoftware.softID = tblSoftwareUni.SoftID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where tblSoftwareUni.softwareName Like 'Veeam Backup & Replication%' And
tblState.Statename = 'Active'
Order By tblAssets.Domain,
tblAssets.AssetName

Show

Hide