Veritas · Backup Exec Agent

CVE-2021-27877

Veritas Backup Exec Agent Improper Authentication Vulnerability

Exploited in attacks Used by ransomware High 8.2 Attack chance: 65%

What it is

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.

CISA: Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: April 28, 2023

Added to the CISA list: April 7, 2023
Published: March 1, 2021
Severity: High 8.2 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 65% in the top 0.8% of all known vulnerabilities
Weakness: CWE-287
More details: NVD · CVE.org · CISA

All references (2)

More exploited flaws from Veritas

Added	Vulnerability	Product	Severity	Attack chance
Apr 7, 2023	File AccessCVE-2021-27876used by ransomware	Backup Exec Agent	High 8.1	14%
Apr 7, 2023	Command ExecutionCVE-2021-27878used by ransomware	Backup Exec Agent	High 8.8	24%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.