CISA Known Exploited Vulnerability

CVE-2021-27877 Ransomware

Veritas · Backup Exec Agent

Veritas Backup Exec Agent Improper Authentication Vulnerability

Date added
BOD 22-01 due date
CWE CWE-287
Ransomware Known

CISA description

Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

Required action

Apply updates per vendor instructions.