CVE-2024-33673

HIGH

Veritas Backup Exec < 23.0 - Improper Access Control

Title source: rule

Description

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0007
EPSS Percentile 21.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-284
Status published

Affected Products (1)

veritas/backup_exec < 23.0

Timeline

Published Apr 26, 2024
Tracked Since Feb 18, 2026