CVE-2022-36951

In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerability

Critical · published July 27, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

🚨 An unauthenticated remote attack could slam the door wide open! An incorrectly patched vulnerability in Veritas NetBackup OpsCenter means an attacker can waltz right in without a password—yikes! 🔥 Think of it like a restaurant where the host forgets to check IDs at the door—anyone can stroll in and grab a seat without a reservation. This vulnerability allows attackers to take control of the system like uninvited guests at a dinner party! If exploited, this vulnerability could lead to complete system takeover, allowing an attacker to access sensitive data, alter configurations, or even halt operations altogether. The consequences could be absolutely devastating, resulting in data loss and a major disruption for businesses relying on this software.

Put simply

Think of it like a restaurant where the host forgets to check IDs at the door—anyone can stroll in and grab a seat without a reservation. This vulnerability allows attackers to take control of the system like uninvited guests at a dinner party! This vulnerability in Veritas NetBackup OpsCenter allows unauthenticated remote attackers to exploit an incorrectly patched flaw, leading to unauthorized access and potential full control over the host. Affected versions include 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

What to do

If exploited, this vulnerability could lead to complete system takeover, allowing an attacker to access sensitive data, alter configurations, or even halt operations altogether. The consequences could be absolutely devastating, resulting in data loss and a major disruption for businesses relying on this software. To remediate this critical vulnerability, update to the latest version of Veritas NetBackup OpsCenter immediately. Make sure all affected versions are patched, and review your security policies to ensure proper authentication measures are in place. You've got this! By following these steps, you're taking charge of your security and keeping your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01207 · 68.1th percentile
Published
2022-07-27T20:59Z
EPSS history
Timeline
  • 27 JUL 20:59Z
    In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerability
    cvelistv5