This vulnerability in Veeam Backup and Replication 12 involves command injection that enables a local administrator-level attacker to bypass Windows Driver Signature Enforcement. The vulnerability is identified as CWE-77, indicating improper neutralization of special elements used in a command. No CVSS score or detailed technical exploitation information is available. No patch or official remediation has been published yet.

If exploited, a local attacker with administrator privileges could bypass Windows Driver Signature Enforcement, potentially allowing unsigned or malicious drivers to load. This could undermine system integrity and security controls dependent on driver signing. However, exploitation requires local administrator access, limiting the attack vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local administrator access to trusted personnel only and monitor for unusual activity related to driver loading.