CVE-2022-46414

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100

Critical · published December 4, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

🚨 A rogue command can be executed with zero authentication, thanks to a vulnerability in Veritas NetBackup Flex Scale and Access Appliance! 🔥 Think of this like a restaurant where anyone can walk into the kitchen without any checks — they can cook up whatever chaos they fancy without anyone batting an eye! An attacker could remotely execute commands with wild abandon, potentially compromising sensitive data and disrupting operations. This vulnerability leaves your backup systems open to malicious activity, putting your organization at risk of devastating data loss or manipulation.

Put simply

Think of this like a restaurant where anyone can walk into the kitchen without any checks — they can cook up whatever chaos they fancy without anyone batting an eye! This critical vulnerability allows unauthenticated remote command execution through the management portal, meaning attackers can issue commands without any login required.

What to do

An attacker could remotely execute commands with wild abandon, potentially compromising sensitive data and disrupting operations. This vulnerability leaves your backup systems open to malicious activity, putting your organization at risk of devastating data loss or manipulation. Immediately patch to NetBackup Flex Scale 3.1 and Access Appliance 8.0.101 to close this security hole. Additionally, restrict access to the management portal and review your firewall rules to limit exposure. Don't wait—act now to protect your assets! You can tackle this! Patch and secure your systems, and you'll have the upper hand in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01363 · 71.6th percentile
Published
2022-12-04T00:00Z
EPSS history
Timeline
  • 04 DEC 00:00Z
    An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100
    cvelistv5