{
  "port": 13782,
  "protocol": "both",
  "service": "bpcd (NetBackup client daemon)",
  "oneLiner": "The NetBackup client daemon — the agent on every protected host that the backup master tells to run a backup or restore.",
  "whatItIs": "IANA registers 13782 as `bpcd`, \"VERITAS NetBackup\". `bpcd` runs on NetBackup clients and accepts connections from the master or media server to start backups, restores and file listings, which means it has privileged access to the client's filesystem by design. It is the single most commonly seen NetBackup port on a scan because it is installed on every protected machine rather than just the servers, and its long history of remote buffer-overflow advisories made it a standing item on internal pentest checklists.",
  "exposure": {
    "verdict": "never",
    "note": "A daemon that reads and writes arbitrary files on behalf of a remote server should only accept connections from your backup servers. Restrict by source address, never expose it externally."
  },
  "checkCommand": "nmap -Pn -sV -p 13782 TARGET",
  "links": [
    {
      "title": "IANA port registry — 13782 (bpcd)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=13782",
      "kind": "iana"
    }
  ]
}