CVE-2022-36956

published 2022-07-27

CVE-2022-36956: In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup…

Priority P3 46 high 7.5 CVSS 3.1

AV N AC H PR L UI N S U C H I H A H

In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup certificate/private key from the same domain. The affects 9.0.x through 9.0.0.1 and 9.1.x through 9.1.0.1.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
veritas	netbackup	—	—
veritas	netbackup	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.