Attacker can execute malicious code in user's security context via NetBackup commands

CVE-2024-52945

Summary

A vulnerability has been identified in Veritas NetBackup versions prior to 10.5, specifically affecting installations on the Windows Operating System. This flaw could allow for the execution of a malicious Dynamic Link Library (DLL) by tricking users into executing particular NetBackup commands. An attacker may leverage social engineering techniques to persuade the user, facilitating the execution of arbitrary code within the user's security context. This can expose systems to potential unauthorized actions and compromise data integrity.

References