PT-2026-5576 · Veritas · Netbackup

Publicado 2026-02-01 · Atualizado 2026-02-01 · CVE-2020-37045

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 7.0

Description The software contains an unquoted service path vulnerability in the NetBackup INET Daemon service. This allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:Program FilesVeritasNetBackupbinbpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.

Recommendations Versions prior to 7.0 should be upgraded.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-37045

Produtos afetados

Netbackup

Referências · 6

• 🔥 https://exploit-db.com/exploits/48227 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37045 · Nota de Segurança
• https://veritas.com · Nota
• https://vulncheck.com/advisories/netbackup-netbackup-inet-daemon-unquoted-service-path · Nota
• https://t.me/CVEtracker/43427 · Publicação no Telegram
• https://t.me/cveNotify/150512 · Publicação no Telegram