CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 28, 2023

High

CISA KEVRansomware

CVE-2021-27878

Veritas—Backup Exec Agent

Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.

Required Action

https://www.veritas.com/support/en_US/security/VTS21-001; https://nvd.nist.gov/vuln/detail/CVE-2021-27878

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Known
Published: Apr 7, 2023
KEV Added: Apr 7, 2023
Due Date: Apr 28, 2023
Related Articles: 0

Vendor

Veritas

Backup Exec Agent