Exploit for #VU74472 Improper Authentication in Backup Exec

Published: 2023-04-05

Vulnerability identifier: #VU74472

Vulnerability risk: High

CVSSv4.0: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2021-27878

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 2

April 5, 2023
- Veritas Backup Exec Agent Remote Code Execution [Metasploit]
- Veritas Backup Exec Agent Remote Code Execution [Packet Storm]

Vulnerable software:
Backup Exec
Client/Desktop applications / Multimedia software

Vendor: Veritas Technologies