A critical vulnerability in Cohesity NetBackup Flex OS allows authenticated users to escalate privileges to root, resulting in a total compromise of the appliance.

The flaw, classified as CWE-347, involves the improper verification of cryptographic signatures within the management shell. By supplying specially formed access credentials, an authenticated, low-privileged user can bypass signature checks to execute privileged support commands, resulting in full root access to the host.

Successful exploitation leads to a complete loss of confidentiality, integrity, and availability for the affected appliance and all hosted containers. With a CVSS score of 8.8, this vulnerability poses a severe risk, as it grants attackers unrestricted control over critical backup infrastructure, potentially allowing for the deletion or exfiltration of sensitive organizational data.

Immediate Action: Update Cohesity NetBackup Flex OS to version 6.4 or later to resolve the underlying cryptographic verification failure.

Proactive Monitoring: Audit management shell access logs for unusual or unauthorized command executions, particularly those originating from accounts with low-level privileges.

Compensating Controls: Restrict access to the management shell to authorized personnel only and ensure the appliance is isolated within a secure management network segment to limit the attack surface.

Public Exploit Available: No (exploit_available: false)

Given the potential for total system compromise, organizations should prioritize patching their Cohesity NetBackup Flex OS deployments immediately. Testing and deploying version 6.4 will eliminate the root cause of this privilege escalation, ensuring the integrity of the backup management environment.