PT-2021-11943 · Microsoft+1 · Windows+2

Published 2021-01-06 · Updated 2021-01-11 · CVE-2020-36163

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup and OpsCenter versions through 8.3.0.1

Description: An issue was discovered in Veritas NetBackup and OpsCenter where NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. A low privileged user on the Windows system can create an affected path with a library that NetBackup attempts to load, allowing them to execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing them to access all data and installed applications. The system is vulnerable during an install or upgrade on all systems and post-install on Master, Media, and OpsCenter servers during normal operations.

Recommendations: For Veritas NetBackup and OpsCenter versions through 8.3.0.1, consider restricting access to the Strawberry Perl libraries to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid creating directories under C: that could be used to load malicious libraries. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-36163

Affected Products

Opscenter

Veritas Netbackup

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-36163 · Security Note
• https://veritas.com/content/support/en_US/security/VTS20-016#Issue2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-36163 · Vendor Advisory
• https://t.me/cvenotify/8205 · Telegram Post