CVE-2021-27878—Veritas Backup Exec Agent Command Execution Vulnerability

PUBLISHEDvulnerability record
2023-04-07 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2021-27878
Project:
Veritas
Product:
Backup Exec Agent
Date Added:
2023-04-07
Due Date:
2023-04-28
Last Updated:
June 21, 2025

Vulnerability Name

Veritas Backup Exec Agent Command Execution Vulnerability

Description

Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://www.veritas.com/support/en_US/security/VTS21-001
  • https://nvd.nist.gov/vuln/detail/CVE-2021-27878

Related Weaknesses

browse all CVEs