CVE-2017-17420: Quest NetVault Backup NVBUJobCountHistory SQL injection allows remote code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: high.

critical priorityCVSS 9.8 with network reachability, no authentication and no user interaction, plus high EPSS, makes this a top-priority exposure for any internet- or broadly reachable NetVault Backup instance.

What it is

Quest NetVault Backup 11.3.0.12 fails to validate a user-supplied string in the NVBUJobCountHistory Get method before building SQL queries, creating a SQL injection flaw. Because the query runs in the context of the underlying database, an unauthenticated remote attacker can turn the injection into arbitrary code execution. The issue was reported through ZDI (ZDI-CAN-4231).

Impact

An attacker gains code execution with the privileges of the NetVault Backup database service, which can lead to full compromise of the backup server and the data it manages. No credentials are needed.

Attack surface

Reachable over the network through the NVBUJobCountHistory Get method request handling; the CVSS vector (AV:N/PR:N/UI:N) and the description confirm no authentication and no user interaction are required.

Exploitation

Not listed in CISA KEV and no public exploit references are tagged in the record, but EPSS is high at 0.4816 (98.8th percentile), indicating elevated likelihood of attempted exploitation.

What to do

• Apply the Quest NetVault Backup fix for CVE-2017-17420 or upgrade to a supported release; the record does not list affected or fixed versions, so confirm with Quest.
• Restrict network access to the NetVault Backup service so only trusted management hosts can reach it.
• Run the NetVault Backup database service with least privilege to limit the impact of code execution.
• Monitor and alert on unexpected SQL activity or process spawning from the NetVault Backup service.

Detection

• Inspect NetVault Backup logs for malformed or anomalous NVBUJobCountHistory Get requests.
• Alert on SQL error messages or unusual query patterns originating from the NetVault Backup service.
• Monitor for unexpected child processes or command execution spawned by the NetVault Backup database service.
• Watch network traffic to the NetVault Backup service from hosts outside the expected management subnet.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.