CVE-2024-53913

Summary

CVE-2024-53913 is a newly disclosed vulnerability affecting Veritas Enterprise Vault versions prior to 15.2. This issue, identified as ZDI-CAN-24343, permits remote attackers to execute arbitrary code. The vulnerability arises due to the server's improper handling of untrusted data received on a .NET Remoting TCP port. Attackers can exploit this issue by sending malicious data to the server, resulting in code execution and potential security compromise. Users of the affected software are advised to update to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.