Home Veritas CVE-2024-52945
Back to Veritas

CVE-2024-52945

NetBackup

Veritas CVSS 7.8 Updated March 15, 2026

Executive Risk Summary

"A vulnerability in Veritas NetBackup before version 10.5 allows a malicious DLL to be loaded, resulting in execution of the attacker's code in the user's security context. This vulnerability can be exploited by executing specific NetBackup commands or through social engineering techniques."

Operational Audit Arsenal

Target Type DLL
Target Asset Unknown/Malicious DLL
Standard Path %windir%\System32
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Unknown/Malicious DLL (DLL)
$Targets = 'Unknown/Malicious DLL'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Backup services

Internal Work Notes

Apply NetBackup version 10.5 or later to mitigate vulnerability CVE-2024-52945, which allows malicious DLL loading and code execution.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Veritas Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.