ID:8961 - Exploit for Improper Authentication in Backup Exec - CVE-2021-27877

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an usage of obsolete however not disabled SHA authentication scheme. A remote non-authenticated attacker can use the SHA authentication scheme to gain unauthorized access to the BE Agent and execute privileged commands on the system.

Remediation