Lucene search

K
nvd[email protected]NVD:CVE-2022-36986
HistoryJul 28, 2022 - 1:15 a.m.

CVE-2022-36986

2022-07-2801:15:17
web.nvd.nist.gov
1

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

55.1%

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unauthenticated access could remotely execute arbitrary commands on a NetBackup Primary server.

Affected configurations

NVD
Node
veritasflex_applianceMatch1.2
OR
veritasflex_applianceMatch1.3
OR
veritasflex_applianceMatch2.0
OR
veritasflex_applianceMatch2.0.1
OR
veritasflex_applianceMatch2.0.2
OR
veritasflex_applianceMatch2.1
OR
veritasflex_scaleMatch1.3.1
OR
veritasflex_scaleMatch2.1
OR
veritasnetbackupMatch8.1.1
OR
veritasnetbackupMatch8.1.2
OR
veritasnetbackupMatch8.2
OR
veritasnetbackupMatch8.3
OR
veritasnetbackupMatch8.3.0.1
OR
veritasnetbackupMatch8.3.0.2
OR
veritasnetbackupMatch9.0
OR
veritasnetbackupMatch9.0.0.1
OR
veritasnetbackupMatch9.1
OR
veritasnetbackupMatch9.1.0.1
OR
veritasnetbackup_applianceMatch3.1.1
OR
veritasnetbackup_applianceMatch3.1.2
OR
veritasnetbackup_applianceMatch3.2
OR
veritasnetbackup_applianceMatch4.0
OR
veritasnetbackup_applianceMatch4.1
OR
veritasnetbackup_applianceMatch3.2maintenance_release1
OR
veritasnetbackup_applianceMatch3.2maintenance_release2
OR
veritasnetbackup_applianceMatch3.2maintenance_release3
OR
veritasnetbackup_applianceMatch3.3.0.1maintenance_release1
OR
veritasnetbackup_applianceMatch3.3.0.1maintenance_release2
OR
veritasnetbackup_applianceMatch3.3.0.2maintenance_release1
OR
veritasnetbackup_applianceMatch3.3.0.2maintenance_release2
OR
veritasnetbackup_applianceMatch4.0.0.1maintenance_release1
OR
veritasnetbackup_applianceMatch4.0.0.1maintenance_release2
OR
veritasnetbackup_applianceMatch4.0.0.1maintenance_release3
OR
veritasnetbackup_applianceMatch4.1.0.1maintenance_release1
OR
veritasnetbackup_applianceMatch4.1.0.1maintenance_release2

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

55.1%

Related for NVD:CVE-2022-36986