Lucene search

K
cveMitreCVE-2022-36992
HistoryJul 28, 2022 - 1:15 a.m.

CVE-2022-36992

2022-07-2801:15:17
mitre
web.nvd.nist.gov
41
5
veritas
netbackup
cve-2022-36992
vulnerability
remote code execution
nvd

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

42.0%

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server (in specific notify conditions).

Affected configurations

Nvd
Node
veritasflex_applianceMatch1.2
OR
veritasflex_applianceMatch1.3
OR
veritasflex_applianceMatch2.0
OR
veritasflex_applianceMatch2.0.1
OR
veritasflex_applianceMatch2.0.2
OR
veritasflex_applianceMatch2.1
OR
veritasflex_scaleMatch1.3.1
OR
veritasflex_scaleMatch2.1
OR
veritasnetbackupMatch8.1.1
OR
veritasnetbackupMatch8.1.2
OR
veritasnetbackupMatch8.2
OR
veritasnetbackupMatch8.3
OR
veritasnetbackupMatch8.3.0.1
OR
veritasnetbackupMatch8.3.0.2
OR
veritasnetbackupMatch9.0
OR
veritasnetbackupMatch9.0.0.1
OR
veritasnetbackupMatch9.1
OR
veritasnetbackupMatch9.1.0.1
OR
veritasnetbackup_applianceMatch3.1.1
OR
veritasnetbackup_applianceMatch3.1.2
OR
veritasnetbackup_applianceMatch3.2
OR
veritasnetbackup_applianceMatch4.0
OR
veritasnetbackup_applianceMatch4.1
OR
veritasnetbackup_applianceMatch3.2maintenance_release1
OR
veritasnetbackup_applianceMatch3.2maintenance_release2
OR
veritasnetbackup_applianceMatch3.2maintenance_release3
OR
veritasnetbackup_applianceMatch3.3.0.1maintenance_release1
OR
veritasnetbackup_applianceMatch3.3.0.1maintenance_release2
OR
veritasnetbackup_applianceMatch3.3.0.2maintenance_release1
OR
veritasnetbackup_applianceMatch3.3.0.2maintenance_release2
OR
veritasnetbackup_applianceMatch4.0.0.1maintenance_release1
OR
veritasnetbackup_applianceMatch4.0.0.1maintenance_release2
OR
veritasnetbackup_applianceMatch4.0.0.1maintenance_release3
OR
veritasnetbackup_applianceMatch4.1.0.1maintenance_release1
OR
veritasnetbackup_applianceMatch4.1.0.1maintenance_release2
VendorProductVersionCPE
veritasflex_appliance1.2cpe:2.3:a:veritas:flex_appliance:1.2:*:*:*:*:*:*:*
veritasflex_appliance1.3cpe:2.3:a:veritas:flex_appliance:1.3:*:*:*:*:*:*:*
veritasflex_appliance2.0cpe:2.3:a:veritas:flex_appliance:2.0:*:*:*:*:*:*:*
veritasflex_appliance2.0.1cpe:2.3:a:veritas:flex_appliance:2.0.1:*:*:*:*:*:*:*
veritasflex_appliance2.0.2cpe:2.3:a:veritas:flex_appliance:2.0.2:*:*:*:*:*:*:*
veritasflex_appliance2.1cpe:2.3:a:veritas:flex_appliance:2.1:*:*:*:*:*:*:*
veritasflex_scale1.3.1cpe:2.3:a:veritas:flex_scale:1.3.1:*:*:*:*:*:*:*
veritasflex_scale2.1cpe:2.3:a:veritas:flex_scale:2.1:*:*:*:*:*:*:*
veritasnetbackup8.1.1cpe:2.3:a:veritas:netbackup:8.1.1:*:*:*:*:*:*:*
veritasnetbackup8.1.2cpe:2.3:a:veritas:netbackup:8.1.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 351

Social References

More

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

42.0%

Related for CVE-2022-36992