PT-2021-7747 · Veritas · Veritas Backup Exec

CVE-2021-27877 · Published 2021-03-01 · Updated 2026-07-05

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veritas Backup Exec versions prior to 21.2

Description An authentication flaw exists due to the continued support of the SHA cryptographic algorithm authentication scheme. Although this scheme is no longer used in current versions, it remained enabled, allowing a remote attacker to bypass security restrictions, gain unauthorized access to an Agent, and execute privileged commands.

Recommendations Update to version 21.2 or later.

Exploit

Fix

RCE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-02421

CVE-2021-27877

Affected Products

Veritas Backup Exec

References · 27

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/veritas/beagent_sha_auth_rce.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html · Exploit
• https://osv.dev/vulnerability/CVE-2021-27877 · Vendor Advisory
• https://veritas.com/support/en_US/security/VTS21-001 · Security Note
• https://bdu.fstec.ru/vul/2023-02421 · Security Note
• https://veritas.com/content/support/en_US/security/VTS21-001#issue1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27877 · Security Note
• https://t.me/cveNotify/141324 · Telegram Post
• https://t.me/aptreports/3457 · Telegram Post
• https://t.me/aptreports/3458 · Telegram Post
• https://twitter.com/DefusedCyber/status/1977709712561799257 · Twitter Post
• https://twitter.com/DefusedCyber/status/1995451557081456676 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27877 · Note
• https://twitter.com/fletch_ai/status/1765937511627403559 · Twitter Post
• https://twitter.com/DefusedCyber/status/1975144933624279229 · Twitter Post