CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Veritas Backup Exec Agent Authentication Bypass and Remote Code Execution Vulnerability Advisory (CVE-2021-27878)
[Affected Scope] Veritas Backup Exec versions prior to 21.2 (Remote Agent)
[Impact] Attackers can bypass authentication via flaws in the SHA authentication scheme and execute arbitrary commands with SYSTEM privileges
[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict external access to the NDMP port (TCP 10000)
Veritas Backup Exec Agent Authentication Bypass and Remote Code Execution Vulnerability (CVE-2021-27877) Security Advisory
[Affected Scope] Veritas Backup Exec Agent versions prior to 21.2 (Windows/Linux)
[Impact] Remote attackers can bypass authentication to gain unauthorized access to the Agent and execute privileged commands with SYSTEM/root privileges
[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, or restrict network access to the Agent port (default TCP 10000)
Veritas Backup Exec Agent Authentication Bypass and Remote Code Execution Vulnerability (CVE-2021-27876) Security Advisory
[Affected Scope] Veritas Backup Exec Remote Agent installed on Windows and Linux systems prior to version 21.2
[Impact] Attackers can bypass authentication via flaws in the SHA Authentication scheme, gaining unauthorized access to execute data management commands with System privileges, leading to arbitrary file access and remote code execution
[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict network access to the NDMP port (TCP 10000)