A vulnerability in the Veeam Management Pack for Microsoft System Center Collector service allows an authenticated domain user to execute arbitrary code with LocalSystem privileges. The flaw stems from insecure deserialization of untrusted data (CWE‑502), permitting attackers to run arbitrary code on the host, potentially compromising all services on that machine.

All servers running the Veeam Management Pack for Microsoft System Center Collector service are potentially affected; no specific version information is disclosed, so the entire deployment is at risk.

The CVSS score of 8.7 indicates a medium‑to‑high level of severity. Because the EPSS score is not available and the vulnerability is not listed in CISA KEV, the external exploitation probability is unknown, but the reliance on authenticated domain credentials suggests that once an attacker obtains legitimate domain access, they can exploit the flaw. The resulting remote code execution as LocalSystem can lead to full system compromise.