CVE-2020-36167

CVE-2020-36167 is a critical arbitrary code execution vulnerability affecting Veritas Backup Exec versions through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. The vulnerability arises from the software's attempt to load a potentially non-existent OpenSSL configuration file, which a low-privileged attacker can exploit. With a CVSS score of 8.8 (HIGH), this vulnerability allows a local, low-privileged attacker to achieve arbitrary code execution as SYSTEM when the Backup Exec service starts. This grants the attacker full administrative control over the affected system, including access to all data and applications, and potentially impacting an entire Active Directory domain if the system is a domain controller. Currently, there is no evidence of active exploitation, public exploit code (e.g., Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Organizations are advised to apply the relevant hotfixes to mitigate this risk.