CVE-2024-54664

Summary

CVE-2024-54664 is a newly discovered vulnerability affecting Veritas NetBackup versions prior to 10.5 on Windows operating systems. This issue allows a malicious DLL to be loaded through specific NetBackup commands or social engineering tactics. Once loaded, the attacker's code is executed in the user's security context, potentially leading to serious security implications beyond those outlined in CVE-2024-52945. This vulnerability can only be exploited on NetBackup components running on Windows systems. Users are strongly advised to update their NetBackup software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.