← back
CVE-2024-28222

CVE-2024-28222

CVSS 9.8 CRITICALEPSS 1.0%
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.8EPSS 1.0%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
07 Mar 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →