CVE-2021-27877

Veritas Backup Exec Agent's improper authentication flaw allowed unauthorized access via SHA, enabling ransomware attacks.

The Veritas Backup Exec Agent suffered an improper authentication vulnerability that allowed attackers to bypass authentication using the SHA scheme, granting unauthorized access to the agent. This failure is critical for DIB organizations because backup systems are high-value targets for ransomware, and compromised backup agents can lead to data encryption and loss. Organizations must ensure all backup software is patched and monitored for exploitation, especially those listed in CISA's KEV catalog.

Shame score — The vulnerability was actively exploited in the wild and linked to ransomware, indicating a severe, avoidable failure in authentication design and patch management.