【Vulnerability Alert】Veeam Backup Replication, Veeam's core backup software, has a critical security vulnerability (CVE-2025-64393)

• Subject: 【Vulnerability Alert】Veeam Backup Replication, Veeam's core backup software, has a critical security vulnerability (CVE-2025-64393)

• Description:
  • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000012
  • Veeam Backup Replication is Veeam's core backup software. Veeam recently released a critical security vulnerability advisory (CVE-2025-64393, CVSS 4.x: 9.4). This vulnerability allows a low-privileged user with the Backup Viewer role to execute remote code (RCE) on the backup server through unsafe deserialization of untrusted data received via the mount service.
• Affected Platforms:
  • Veeam Backup Replication versions 12.3.2 P3 12.3.2.4854 (inclusive) and earlier
• Recommended Actions:
  • Please update to Veeam Backup Replication version 12.3.2 P4 12.3.2.4934 (inclusive) or later
• References:
  1. https://www.twcert.org.tw/tw/cp-169-11275-1a695-1.html

Computer and Communication Center
Network System Division