cve.bz

CVE-2021-27877

9.8 criticalKEVEPSS 65%

Critical (9.8) in Veritas Backup Exec Agent. In CISA KEV since 2023-04-07, with known ransomware use. EPSS 65% chance of exploitation in the next 30 days.

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
65% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2023-04-07, due 2023-04-28, known ransomware use
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON