CVE-2024-28222

CRITICAL

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.

Affects 3 products across 1 vendor.

CVSS 3.19.8
EPSS1.0%
Percentile62th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-22: Path Traversal

Attacker manipulates file path inputs to access files outside the intended directory.

Related Attack Patterns (CAPEC)
CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
via CWE-22
CAPEC-76 Manipulating Web Input to File System Calls
via CWE-22
CAPEC-78 Using Escaped Slashes in Alternate Encoding
via CWE-22
CAPEC-79 Using Slashes in Alternate Encoding
via CWE-22
CAPEC-126 Path Traversal
via CWE-22

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A critical vulnerability in Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2 allows unauthenticated attackers to upload and execute arbitrary files due to inadequate file path validation in the BPCD process.

BSID: BS-2024-GLOBAL-051473-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-28222?
A critical vulnerability in Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2 allows unauthenticated attackers to upload and execute arbitrary files due to inadequate file path validation in the BPCD process.
What is the CVSS score for CVE-2024-28222?
CVE-2024-28222 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 1.0%.
Is CVE-2024-28222 actively exploited?
No confirmed active exploitation of CVE-2024-28222 as of 2026-05-30.
How do I remediate CVE-2024-28222?
Priority: IMMEDIATE. Advisory: https://www.veritas.com/content/support/en_US/security/VTS23-010 PSIRT: [email protected]
What systems are affected by CVE-2024-28222?
CVE-2024-28222 affects Veritas Netbackup, Netbackup Appliance.
Vulnerability Details
CVE IDCVE-2024-28222
BSIDBS-2024-GLOBAL-051473-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2024-03-07
Last Modified2025-01-21
ICS Relevance15%
Weakness (CWE)
Path Traversal
SourceNVD
Official Description

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is exploited by sending a specially crafted request to the BPCD process, which does not properly validate the file path. This allows an attacker to upload a malicious file to a writable directory and execute it with the privileges of the BPCD process.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Veritas Netbackup < 8.1.2
Veritas Netbackup Appliance (device & firmware) < 3.1.2
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 953 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash52156bcab7f5d9969d1e0679d8eab8524be116949657452f2d708c734047a1bcbc25954cceef9ef02f7c4a8d01361a60c1b257837536d7387f930405208916dd
Related CVEs affecting Veritas
CVE-2003-1361 10.0 Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage M... CVE-2015-6550 9.8 bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1... CVE-2016-7399 9.8 scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.... CVE-2015-6552 9.8 The management-services protocol implementation in Veritas NetBackup 7.x thro... CVE-2017-6403 9.8 An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Applian...
View all Veritas CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →