CVE-2023-22793

{
  "etk_id": "ETK-2026-3016",
  "cve_id": "CVE-2023-22793",
  "display_id": "CVE-2023-22793",
  "ghsa_id": "GHSA-6762-qxrg-r3x8",
  "euvd_id": "EUVD-2023-60727",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated deserialization in Veeam Virtualization Extensions",
  "summary": "Veeam Management Pack for Microsoft System Center installations running the Veeam Virtualization Extensions service are affected by an unsafe deserialization vulnerability. An unauthenticated network attacker may execute code remotely on an affected server; the service must be running and reachable by the attacker.",
  "mitigation": "Update Management Pack for Microsoft System Center to version 13.1.0.334 or later. Restrict network access to the Veeam Virtualization Extensions service until the update is applied.",
  "vendor": "Veeam",
  "product": "Management Pack for Microsoft System Center",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 9.0, < 13.1.0.334"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "13.1.0.334"
      ],
      "package_name": "Management Pack for Microsoft System Center",
      "purl": null
    }
  ],
  "cwes": [
    502
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 12.145752933333334,
  "t0_at": "2026-10-29T22:55:37.594000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-29T22:55:37.594000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T22:55:37.594000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22793"
    }
  }
}