CVE-2024-33673

{"id": "CVE-2024-33673", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-04-26T02:15:06.790", "references": [{"url": "https://www.veritas.com/support/en_US/security/VTS24-002#H2", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.veritas.com/support/en_US/security/VTS24-002#H2", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Veritas Backup Exec antes de la versi\u00f3n 22.2 HotFix 917391. Los controles de acceso inadecuados permiten el secuestro de DLL en la ruta de b\u00fasqueda de DLL de Windows."}], "lastModified": "2025-06-30T14:22:57.057", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4899F727-0DE6-449B-BECE-DD04647B7815", "versionEndExcluding": "23.0", "versionStartIncluding": "21.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}