CVE-2020-37045Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Veritas\NetBackup\bin\bpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-02-01); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-01: 1Mentions · 2026-02-05: 1Technical Details · 2026-02-01: 1Technical Details · 2026-02-05: 102-0102-05
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2020-37045 (CVSS:8.5, HIGH) is Awaiting Analysis. Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows l..https://nvd.nist.gov/vuln/detail/CVE-2020-37045 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The tweet announces CVE-2020-37045, noting its high severity and describing it as an unquoted service path flaw in Veritas NetBackup 7.0, with no evidence of exploitation, PoC, or patch information.

    0000041
    171 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2020-37045 Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary co… https://www.cve.org/CVERecord?id=CVE-2020-37045

    Post summary

    The post provides a brief disclosure of CVE-2020-37045, noting an unquoted service path flaw in Veritas NetBackup that could let local users run arbitrary code.

    00000476
    56.5K followersView on X

Explore more