Veeam 12.1 installs an out of date version of pscp.exe (Case # 07042343)

[DaveEvans]

Installing (upgrading to) current version of Veeam = 12.1.0.2131

The Upgrade process installs PUTTY and attendant programs, but from version 0.76 (as far as I can tell)
C:\Program Files\Veeam\Backup and Replication\Console\PUTTY\putty.exe shows as version 0.76 - (released 2021-07-17)
Current version is of PUTTY is 0.79 (released 2023-08-26)

our AV (SentinelOne) quarantines pscp.exe

It might be a good idea to use the up to date versions of third party utilities when you build the next release?

Hopefully this is a false positive and your version of pscp has not been compromised?

[Dima P.]

Hello Dave,

Looks like a false positive, the putty version was not upgraded because it's proven to be the stable version and other later version do not contain any security fixes.

If possible can you share more details on how S1 has threated such potential issue? Is there any detailed error or reference to vulnerability? Thank you!

[DaveEvans]

Noted that there were no bug fixes after the version you deployed.
I'll try to see what the AV was complaining about & report back.