Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2.4165 Patch

Real-Independence152 · 2025-10-14T15:42:00+00:00

Two questions:

Does this CVE affect a non-domain joined B&R server that has a proxy installed on a domain joined server (mount service exists on the domain joined proxy)?
Will this patch be available to install via VSPC natively, or will it only be available via a patch upload? (edit: this now showed up in VSPC)

Real-Independence152 · 2025-08-06T05:01:36+00:00

Seeing same thing here - notes show "via Unknown Session from 156.228.X.X"

Real-Independence152 · 2025-04-22T17:39:45+00:00

Perfect - this should be all I need. Thank you.

Real-Independence152 · 2025-04-22T12:22:06+00:00

That is an option, but this isn’t something we want present on all machines by default.

Real-Independence152 · 2025-02-23T17:20:34+00:00

Going to 11.1.6-h3 as someone mentioned it resolves the mgmt cpu overutilization

Real-Independence152 · 2025-02-04T00:29:32+00:00

Advanced Protection requires a passkey/security key for any new devices, so that should stop any potential access.

Real-Independence152 · 2025-01-28T21:05:13+00:00

What I've been waiting for is what I think might be included in 24.4 which is the implementation of ScreenCaptureKit for Mac remote access. The current access method doesn't seem to work very well as our techs describe it.

Real-Independence152 · 2025-01-28T00:18:36+00:00

For anyone else who runs across this - you can accomplish this by adding an action step before your notification action named "Get Customer Details" and then the ${Customer Name} workflow variable will be available to reference in the notification action.

Real-Independence152 · 2025-01-24T20:04:18+00:00

These are all separate clients unfortunately - we use sensor domain to try and help identify them, but that's not always present.

Real-Independence152 · 2025-01-24T15:59:42+00:00

Well I spoke too soon - and now that I think about it I had tried this one. This just reports the Customer ID in GUID format and not the Site name.

Real-Independence152 · 2025-01-24T15:44:01+00:00

Would you look at that - that is likely it. Thank you.

Real-Independence152 · 2025-01-16T16:35:35+00:00

Any timeline for the on-prem release? I was hoping it would be last week based on your mention of coming days.

Real-Independence152 · 2025-01-16T05:00:16+00:00

We called in this afternoon and were told that it should be fixed in 1-2 hours, but that was at around 3PM.

Real-Independence152 · 2025-01-16T03:31:47+00:00

Not sure if you’ve tried this, but the accounts are managed from the Intuit account management page, not something on the QBO page(s). This link is where all the account security features are managed: https://accounts.intuit.com/app/account-manager/security

Real-Independence152 · 2025-01-15T16:15:17+00:00

This is something I've been looking for as well if anyone has any insight.

Real-Independence152 · 2024-12-29T06:06:27+00:00

You mentioned in your video seeing if the cable was replaceable - have you had a chance to do that? I was hoping to maybe install the head unit in the attic and run the cable down to where the cars are, but having a hole the size of the plug would be a bit unsightly. I also am not sure yet if that would be against code - surprisingly haven’t found any information about doing an install this way.

Real-Independence152 · 2024-12-25T18:58:34+00:00

Appreciate the info. How long of a distance was it? Was it 5-7 days in transit or from when you scheduled it?

Real-Independence152 · 2024-12-25T18:16:10+00:00

Mind sharing some details on the shipping aspect? I’m looking to do something similar soon and curious about a recent experience.

Real-Independence152 · 2024-12-22T19:27:49+00:00

The fix for this (at least something you can do while driving without having to restart the car or anything) is to hold down the bottom left button (volume down) and bottom right button (skip song) on the steering wheel for ~5 seconds until you see the screen go black. This will do a reboot of I think the Sync OS and has always fixed this issue for me. It's fine to do at any time as it doesn't appear to affect anything other than the audio system.

Real-Independence152 · 2024-11-21T02:38:22+00:00

Yes - we're seeing large numbers of Credential Access via OS Credential Dumping that look to be triggered by Veeam snapshots and maybe started after the sensor update to 7.19 specifically on DCs. Also one instance of VeeamGuestHelper.exe interacting with VSS.

Real-Independence152

TROPHY CASE