CVE Watch—

CVE-2021-27878

Veritas Backup Exec Agent Command Execution Vulnerability

CVSS

—

No CVSS

EPSS

24.0%

p98

KEV

YES

Apr 7, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

24.0%EPSS · 30 days24.0%

2026-08-022026-08-31

KEV catalog record

Product

Veritas / Backup Exec Agent

Vulnerability

Veritas Backup Exec Agent Command Execution Vulnerability

Added to KEV

Apr 7, 2023

Remediate by

Apr 28, 2023

Known ransomware use

Yes

Summary description

Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.

Required action

Apply updates per vendor instructions.

Notes

https://www.veritas.com/support/en_US/security/VTS21-001; https://nvd.nist.gov/vuln/detail/CVE-2021-27878

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2021-27877—

99.2%

KEV—80Veritas Backup Exec Agent Improper Authentication Vulnerability—CVE-2021-27876—

96.2%

KEV—79Veritas Backup Exec Agent File Access Vulnerability—