Veeam ONE Vulnerability Audit – September 2024
Operating System Security VulnerabilityDiscover Vulnerable Veeam ONE Installs in Your Network
Veeam has released security updates for 6 of its products addressing 18 vulnerabilities, 6 of which are in their Veeam One IT monitoring and analytics platform. All of these vulnerabilities have a high or critical severity rating (CVSS: 7.3 – 9.1) and could significantly compromise the integrity of your data and operations. You can find more details in our Veeam Vulnerability Blog.
To help you locate any vulnerable Veeam ONE installations, the report below will provide you with an overview of all affected installs that you still need to update. This way you have an actionable list of installs that need your intervention.
Run the Veeam ONE (September 2024) Vulnerability Audit Report Now!
Veeam ONE Vulnerability Audit Lansweeper On-Prem Query
Select Top 1000000 tblAssets.AssetID, tblAssets.AssetName, tblAssets.Domain, tblAssets.Username, tblAssets.Userdomain, Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon, tblAssets.IPAddress, tsysIPLocations.IPLocation, tblAssetCustom.Manufacturer, tblAssetCustom.Model, tsysOS.OSname As OS, tblAssets.Version, tblAssets.SP, tblSoftwareUni.softwareName, tblSoftwareUni.SoftwarePublisher, tblSoftware.softwareVersion, Case When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 12 Then 'Safe' When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 12 And Cast(ParseName(tblSoftware.softwareVersion, 3) As int) > 2 Then 'Safe' When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 12 And Cast(ParseName(tblSoftware.softwareVersion, 3) As int) = 2 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 0 Then 'Safe' When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 12 And Cast(ParseName(tblSoftware.softwareVersion, 3) As int) = 2 And Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 0 And Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 4093 Then 'Safe' Else 'Vulnerable' End As [Vulnerable/Safe], Case When tblErrors.ErrorText Is Not Null Or tblErrors.ErrorText != '' Then 'Scanning Error: ' + tsysasseterrortypes.ErrorMsg Else '' End As ScanningErrors, tblAssets.Lastseen, tblAssets.Lasttried From tblAssets Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype Inner Join tsysIPLocations On tsysIPLocations.LocationID = tblAssets.LocationID Inner Join tblState On tblState.State = tblAssetCustom.State Inner Join tblSoftware On tblSoftware.AssetID = tblAssets.AssetID Inner Join dbo.tblSoftwareUni On tblSoftware.softID = tblSoftwareUni.SoftID Left Join tsysOS On tsysOS.OScode = tblAssets.OScode Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID, Max(tblErrors.Teller) As ErrorID From tblErrors Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID = ScanningError.ID Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype = tblErrors.ErrorType Where tblSoftwareUni.softwareName Like 'Veeam ONE%' And tblState.Statename = 'Active' Order By tblAssets.Domain, tblAssets.AssetName