PatchTheCVECVE-2024-52945: An issue was discovered in Veritas NetBackup before 10.5
CVE-2024-52945 is a high-severity flaw (CVSS 7.8) affecting netbackup. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 86%) |
| CISA exploited list | No |
| Weakness | CWE-94 |
| Published | 2024-11-18 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-52945?
netbackup: upgrade to 10.5. Exact commands for each OS are on this page.
Is CVE-2024-52945 being exploited?
CVE-2024-52945 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-52945 affect?
CVE-2024-52945 affects netbackup. Severity is high (CVSS 7.8). An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to i
How urgent is CVE-2024-52945?
Priority 31/100. High severity