CVE-2021-27877CISA KEV: Actively Exploited

Veritas Backup Exec Agent Improper Authentication Vulnerability

Published Apr 7, 2023·Updated Apr 7, 2023

Description

Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

Public Exploits & PoCs1 found

[POC] GHSA-2j8v-hwgc-x698 — CVE-2021-27877-PoC

A modified version of the Rapid7 Metasploit module for CVE-2021-27877 that supports direct command execution for reliable vulnerability validation. Includes documentation explaining the exploit workflow, the module modifications, and usage examples.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free