Critical severity · published Mar 1, 2021
CVE-2021-27877
Veritas Backup Exec Agent Improper Authentication Vulnerability
RansomwareIn wildKEV
9.8
CVSS
64.9%
EPSS
Yes
On KEV
Description
An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)64.9% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Apr 7, 2023
Federal remediation dueApr 28, 2023
Ransomware campaign useKnown
Affected products
Which versions
BE
Backup Exec · Veritas
before 21.2 · source: NVD
BE
Backup Exec Agent · Veritas
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-27877
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-27877
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://www.veritas.com/content/support/en_US/security/VTS21-001#issue1
x_refsource_MISC
http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html
More from Backup Exec
8.8
CVE-2021-27878
Veritas Backup Exec Agent Command Execution Vulnerability
8.1
CVE-2021-27876
Veritas Backup Exec Agent File Access Vulnerability
9.8
CVE-2017-8895
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can…
8.8
CVE-2020-36167
An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517
7.8
CVE-2024-33673
An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391