CVE-2024-53915

Summary

CVE-2024-53915 is a newly disclosed vulnerability affecting Veritas Enterprise Vault versions prior to 15.2. This issue, identified as ZDI-CAN-24405, allows remote attackers to execute arbitrary code. The vulnerability arises from the server's failure to properly handle untrusted data received on a .NET Remoting TCP port, permitting deserialization of malicious code. This security flaw poses a significant risk, potentially enabling unauthorized system access and data manipulation. Organizations using Veritas Enterprise Vault are urged to apply the necessary patches to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.