CVE-2021-27876

HIGH

8.1

CVSS Score

Published: March 1, 2021 at 09:49 PM UTC

Updated: June 17, 2026 at 03:45 AM UTC

1 product affected across 1 vendorBackup Exec

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.1

Exploitation

CISA KEV

Exploit prediction

EPSS 14%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score13.5%

EPSS (Exploit Prediction Scoring System) estimates a 13.5% chance this CVE is exploited in the wild within the next 30 days — higher than 96% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.

Required Action

Apply updates per vendor instructions.

Ransomware Use

Known

Added to KEV

Apr 7, 2023

Remediation Due

Apr 28, 2023

1282 days overdue

Notes

https://www.veritas.com/support/en_US/security/VTS21-001

https://nvd.nist.gov/vuln/detail/CVE-2021-27876

Description

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and complete the authentication process. Subsequently, the client can execute data management protocol commands on the authenticated connection. By using crafted input parameters in one of these commands, an attacker can access an arbitrary file on the system using System privileges.