CVE

CVE-2021-27877

P1⬤ KNOWN RANSOMWARE USE

Veritas Backup Exec Agent Improper Authentication Vulnerability

Veritas · Backup Exec Agent

Date added (CISA)

2023-04-07

Remediation due

2023-04-28

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

Source: NVD ↗ · CISA KEV Catalog ↗