CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-03-01
Veritas Backup Exec Agent Authentication Bypass and Remote Code Execution Vulnerability Advisory (CVE-2021-27878)
[Affected Scope] Veritas Backup Exec versions prior to 21.2 (Remote Agent)
[Impact] Attackers can bypass authentication via flaws in the SHA authentication scheme and execute arbitrary commands with SYSTEM privileges
[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict external access to the NDMP port (TCP 10000)