Arbitrary Code Execution Vulerability in Veritas Enterprise Vault Before 15.2

CVE-2024-53912

Summary

A vulnerability in the server component of Veritas Enterprise Vault prior to version 15.2 allows remote attackers to exploit deserialization of untrusted data received on a .NET Remoting TCP port. When successfully exploited, this vulnerability enables attackers to execute arbitrary code on the affected server. Organizations using affected versions should prioritize timely updates to mitigate this security risk. For detailed remediation steps and further advisory, refer to the official security update from Veritas.

References