Exploited Vulnerabilities DailyCVE-2021-27878: Veritas Backup Exec Agent
EPSS23.9%No. 1076 of 1739 in KEV
CVE year2021~2 yrs before listing
Same vendor in KEV3
Same product3
| Field | Value |
|---|---|
| Vendor | Veritas |
| Product | Backup Exec Agent |
| Name | Veritas Backup Exec Agent Command Execution Vulnerability |
| Added to KEV | 2023-04-07 |
| US federal due date | 2023-04-28 |
| Ransomware use | Known |
| CWE | CWE-287 |
CISA description
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2021-27877 | Veritas Backup Exec Agent | 2023-04-07 | 64.9% | Known |
| CVE-2021-27876 | Veritas Backup Exec Agent | 2023-04-07 | 13.5% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Veritas Backup Exec Agent vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2023-04-07.