PT-2026-5576 · Veritas · Netbackup

Published 2026-02-01 · Updated 2026-02-01 · CVE-2020-37045

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 7.0

Description The software contains an unquoted service path vulnerability in the NetBackup INET Daemon service. This allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:Program FilesVeritasNetBackupbinbpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.

Recommendations Versions prior to 7.0 should be upgraded.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37045

Affected Products

Netbackup

References · 6

• 🔥 https://exploit-db.com/exploits/48227 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37045 · Security Note
• https://veritas.com · Note
• https://vulncheck.com/advisories/netbackup-netbackup-inet-daemon-unquoted-service-path · Note
• https://t.me/CVEtracker/43427 · Telegram Post
• https://t.me/cveNotify/150512 · Telegram Post