CVE-2021-27876

Vulnerability details

Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.

Added to CISA KEV: 2023-04-07

Ransomware campaign use: Known

CISA due date: 2023-04-28

Defensive guidance from CISA

Apply updates per vendor instructions.

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.