VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 7, 2024· Updated Jun 17, 2026

CVE-2024-28222

CVE-2024-28222

Description

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.

Affected products

5
  • Symantec/Netbackup2 versions
    cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*range: <8.1.2
    • (no CPE)range: <8.1.2
  • Symantec/NetBackup Appliance3 versions
    cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*range: <3.1.2
    • (no CPE)
    • (no CPE)range: <3.1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.