CVE-2023-37237

7.2 highEPSS 0.6%

High (7.2) in veritas netbackup appliance. EPSS 0.6% chance of exploitation in the next 30 days.

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2023-06-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veritas:netbackup_appliance

References

https://www.veritas.com/content/support/en_US/security/VTS23-004
https://www.veritas.com/content/support/en_US/security/VTS23-004

Check your stack JSON