An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
Metrics
Affected Vendors & Products
References
History
Tue, 26 Nov 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Veritas
Veritas enterprise Vault |
|
CPEs | cpe:2.3:a:veritas:enterprise_vault:*:*:*:*:*:*:*:* | |
Vendors & Products |
Veritas
Veritas enterprise Vault |
|
Metrics |
ssvc
|
Tue, 26 Nov 2024 16:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-502 |
Sun, 24 Nov 2024 21:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-11-24T00:00:00
Updated: 2024-11-26T16:01:57.856Z
Reserved: 2024-11-24T00:00:00
Link: CVE-2024-53914
Vulnrichment
Updated: 2024-11-26T16:01:23.197Z
NVD
Status : Analyzed
Published: 2024-11-24T21:15:04.453
Modified: 2024-11-29T20:55:35.293
Link: CVE-2024-53914
Redhat
No data.