How to Upgrade .NET and ASP.NET Runtimes When Using Veeam ONE
Purpose
This article documents how to upgrade the .NET and ASP.NET runtime to the latest version when using Veeam ONE.
Veeam ONE utilizes .NET components for multiple purposes like Reporting, Web Services, and more.
The December 2022 Microsoft Security Updates comes with a remote code execution vulnerability fix for NET Core 3.1, .NET 6.0, and .NET 7.0. Those packages should be updated.
Customers running Veeam ONE version 12 or older are advised to follow the steps described in this article to mitigate Microsoft CVE-2022-41089.
Solution
To mitigate Microsoft .NET Framework Remote Code Execution Vulnerability (CVE-2022-41089):
- On the Veeam ONE Server, download the x64 package for both Runtime Installer and ASP.NET Core Runtime, as highlighted in the screenshot below from core/3.1.32.md at main · dotnet/core · GitHub
- Prepare a rollback plan in case something goes wrong:
- If the Veeam ONE server is a Virtual Machine, create a Snapshot.
- If the Veeam ONE server is a physical machine, consider creating an OS backup utilizing Veeam Agent for Windows with a SQL Database backup.
- On the Veeam ONE server, run the x64 Runtime Installer and x64 ASP.NET Core Runtime packages you downloaded in Step 1.
The installation process will take a few moments. - Once both packages are installed, you can confirm that they are applied correctly in the Apps and Features section, as shown below:
- Restart the Veeam ONE Monitoring Service and the Veeam ONE Reporting Service, or reboot the Veeam ONE server.
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.