Remote Code Execution Vulnerability in Veritas Enterprise Vault Before 15.2

CVE-2024-53914

What is CVE-2024-53914?

A remote code execution vulnerability exists in Veritas Enterprise Vault versions prior to 15.2. This flaw arises from improper handling of untrusted data received through a .NET Remoting TCP port, allowing attackers to exploit the deserialization process. If successfully exploited, an attacker could execute arbitrary code on the affected server, potentially leading to unauthorized access and compromise of sensitive data. It is crucial for users of Veritas Enterprise Vault to apply necessary updates to mitigate this security risk.

References