CVE Catalog

CVE-2015-6552

Critical
Published: Translated: NVD NIST

Summary

The management-services protocol implementation in Veritas NetBackup versions 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2, as well as in NetBackup Appliance versions 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to make arbitrary RPC calls via unspecified vectors.

Risk Assessment

Attackers may exploit this vulnerability to perform unauthorized remote operations, potentially leading to serious security breaches in the system.

Recommendation

It is recommended to update to the latest version of Veritas NetBackup and NetBackup Appliance to mitigate this vulnerability.

Original NVD description (English source)

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to make arbitrary RPC calls via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS