This vulnerability in Veeam Backup and Replication 12 involves command injection that enables a local administrator to bypass Windows Driver Signature Enforcement. The issue is classified under CWE-77 and has a CVSS 3.1 base score of 6.7 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), reflecting that exploitation requires local high privileges but can lead to high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is available to confirm remediation status.

If exploited, a local attacker with administrator privileges could bypass Windows Driver Signature Enforcement, potentially allowing the execution of unsigned or malicious drivers. This could compromise system integrity and security controls. However, exploitation requires already having high privileges on the system, limiting the attack vector to local administrators.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local administrator access to trusted personnel only and monitor for suspicious activity related to driver loading. No vendor-provided mitigation or temporary fix is currently documented.