CVE-2021-27877
Veritas Backup Exec Agent: Improper Authentication
As of , CVE-2021-27877 in Veritas Backup Exec Agent is on CISA's list of exploited vulnerabilities: CISA listed it on . Our patch-first group: Patch this week.
- Exploited
- Yes: CISA listed it on 7 April 2023
- US federal deadline
- 28 April 202321 days after CISA listed it. US federal civilian agencies must fix it by then.
- Used in ransomware campaigns
- Known
- EPSS score
- 0.65Higher than 99% of the CVEs EPSS scores. EPSS estimates the chance of exploitation activity in the next 30 days.
- EPSS when listed
- 0.01 on 7 April 2023EPSS on the day CISA listed it.
- Public exploit
- 1 Metasploit module
- Fix
- Vendor advice: www.veritas.comLinks below, from CISA's entry.
What CISA says to do
Apply updates per vendor instructions.
CISA's required action
What the flaw is
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
CISA's description
An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.
The CVE record's description, from mitre
- CVE published
- 1 March 2021
- Assigned by
- mitre
- CVSS
- 8.2 High (CVSS 3.1, from the CNA)
- CWE-287
- Improper Authentication
- CISA SSVC, exploitation
- active
- CISA SSVC, automatable
- yes
- CISA SSVC, technical impact
- partial
Timeline
- The CVE record was published.
- CISA added it to its list of exploited vulnerabilities.
- The US federal deadline to fix it.
Public exploits
Facts from Metasploit's module list and Exploit-DB's index; we never copy exploit code.
- Metasploit: Veritas Backup Exec Agent Remote Code Executionexploit module, rank excellent
Backup Exec Agent: other exploited entries
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2021-27878Command Execution | Veritas Backup Exec Agent | Patch this weekRansomware use; Metasploit module | 0.24 | ||
| CVE-2021-27876File Access | Veritas Backup Exec Agent | Patch this weekRansomware use; Metasploit module | 0.14 |
Read further
- CVE recordcve.org
- NVD entrynvd.nist.gov
- CISA's catalogcisa.gov
- EPSS for this CVEapi.first.org