A local attacker with existing administrator privileges can bypass Windows Driver Signature Enforcement, allowing the installation of unsigned drivers. This flaw permits the attacker to run code in kernel mode and potentially gain persistent elevated privileges. The impact extends to confidentiality, integrity, and availability by enabling malicious drivers to execute with full system rights. The vulnerability is linked to CWE-77, known to involve OS command injection; however, the CVE description does not explicitly state such injection, so this inference is based solely on the associated CWE.

The vulnerability affects the Veeam Backup and Replication suite and the Veeam Software Appliance. No specific version information is provided for the affected builds.

The CVSS score is 6.7 and the EPSS score is <1%; it is not listed in the CISA KEV catalog. The attack vector is local, requiring administrative privileges; once an attacker gains administrative access, they can load unsigned drivers to achieve persistence or manipulate system internals. Given the potential for kernel‑level code execution and full system compromise, the risk is considered moderate to high.