CVE-2015-6550: bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x...

Security readout for executives and security teams

CVE-2015-6550 affects older Veritas NetBackup and NetBackup Appliance releases. A remote attacker could send crafted input to the bpcd component and execute arbitrary commands. Because backup infrastructure often has broad access and trusted credentials, exposure should be treated as a serious operational risk. Likely exposed assets are legacy NetBackup servers, clients, or appliances running the affected version ranges, especially where bpcd is reachable across networks. Internet exposure is not stated in the sources and should be verified through asset inventory and network controls. Prioritize remediation where affected NetBackup systems are reachable beyond tightly controlled backup networks. Backup platforms are high-value targets because compromise can affect recovery capability, sensitive data access, and operational resilience. Mitigation focus: Upgrade affected NetBackup deployments to versions outside the listed vulnerable ranges.; For 7.7.x, use Veritas guidance for releases before 7.7.2.; For NetBackup Appliance 2.7.x, use Veritas guidance for releases before 2.7.2..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.