2024-11-30
:
This article describes a critical vulnerability (CVE-2024-53909) in Veritas Enterprise Vault servers before version 15.2. The vulnerability allows remote attackers to execute arbitrary code on the system due to insecure deserialization of untrusted data received on a .NET Remoting TCP port.
Vulnerability Details:
Platform: Veritas Enterprise Vault
Version: Before 15.2
Vulnerability: Remote Code Execution (RCE)
Severity: Critical (CVSS v3 score: 9.8)
Date: November 24, 2024 (Published), November 26, 2024 (Modified)
What Undercode Says:
This vulnerability is critical and allows attackers complete control over the affected system. It’s crucial to update Veritas Enterprise Vault to version 15.2 or later as soon as possible to mitigate the risk.
References:
Reported By: Nvd.nist.gov
Undercode AI: https://ai.undercodetesting.com
Image Source:
OpenAI: https://openai.com
Undercode AI DI v2: https://ai.undercode.help