April 7, 2023 · Applied Cybernetics Group
CVE-2021-27877 — Veritas Backup Exec Agent
known ransomware use
Veritas Backup Exec Agent Improper Authentication Vulnerability
- Added to KEV
2023-04-07- Federal due date
2023-04-28- Vendor
- Veritas
- Product
- Backup Exec Agent
- EPSS
- 99.2th percentile (score 0.649, as of
2026-07-13) - NVD CVSS v3.1
- —
- Ransomware use
- Known
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2021-27877
CISA short description
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
Required action
Apply updates per vendor instructions.