login
quiescence.eu
Zum Inhalt springen

CVE-2021-27878

Veritas Backup Exec Agent Command Execution Vulnerability

n/a
CVSS
24.0%
EPSS (exploit prob.)
97.6%
EPSS percentile
Yes
Actively exploited
Yes
Ransomware use
2023-04-07
Added

Summary

Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.

Affected software

Vendor: Veritas  ·  Product: Backup Exec Agent

Weakness types (CWE):

CWE-287

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Related vulnerabilities in Veritas

CVENameEPSSExploited
CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability 64.9% Yes
CVE-2021-27876 Veritas Backup Exec Agent File Access Vulnerability 13.4% Yes

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.