PT-2021-24146 · Veritas · Veritas Enterprise Vault

Markus Wulftange + 1 · Published 2021-12-06 · Updated 2022-03-10 · CVE-2021-44677

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2

Description: The issue arises from the deserialization behavior inherent to the .NET Remoting service, which is used by several services started by the Enterprise Vault application on start-up. These services listen on random .NET Remoting TCP ports for possible commands from client applications and can be exploited by a malicious attacker. Both TCP remoting services and local IPC services on the Enterprise Vault Server are vulnerable to exploitation. The vulnerability can be mitigated by properly configuring the servers and firewall as described in the vendor's security alert.

Recommendations: For Veritas Enterprise Vault versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert to mitigate the vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-44677

ZDI-21-1592

Affected Products

Veritas Enterprise Vault

References · 7

• https://osv.dev/vulnerability/CVE-2021-44677 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44677 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1592 · Security Note
• https://veritas.com/content/support/en_US/security/VTS21-003 · Vendor Advisory
• https://t.me/cibsecurity/33416 · Telegram Post
• https://t.me/cvenotify/27995 · Telegram Post
• https://t.me/cvenotify/24323 · Telegram Post