CVE-2011-0546: Symantec Backup Exec

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.

Affected products

• Symantec Backup Exec: version 11.0 only; version 12.0 only; version 12.5 only; version 13.0 only

Published 2011-05-31. Last modified 2026-06-16.