Remote Code Execution Vulnerability in Veritas Enterprise Vault Before 15.2

CVE-2024-53914

Summary

A remote code execution vulnerability exists in Veritas Enterprise Vault versions prior to 15.2. This flaw arises from improper handling of untrusted data received through a .NET Remoting TCP port, allowing attackers to exploit the deserialization process. If successfully exploited, an attacker could execute arbitrary code on the affected server, potentially leading to unauthorized access and compromise of sensitive data. It is crucial for users of Veritas Enterprise Vault to apply necessary updates to mitigate this security risk.

References