CVE-2024-53909

Summary

CVE-2024-53909 is a newly disclosed vulnerability affecting the server component of Veritas Enterprise Vault versions prior to 15.2. This issue, also known as ZDI-CAN-24334, grants remote attackers the ability to execute arbitrary code. The flaw is rooted in the deserialization of untrusted data received on a .NET Remoting TCP port, allowing malicious data to be executed with dangerous consequences. Successful exploitation could lead to privilege escalation or a full system takeover. It is crucial that affected organizations apply the necessary patches as soon as possible to mitigate this serious risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.