PT-2021-24151 · Veritas · Veritas Enterprise Vault

Markus Wulftange + 1 · Published 2021-12-06 · Updated 2022-03-10 · CVE-2021-44682

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2

Description: An issue was discovered in Veritas Enterprise Vault where the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server.

Recommendations: For Veritas Enterprise Vault versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert for this vulnerability to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-44682

ZDI-21-1593

Affected Products

Veritas Enterprise Vault

References · 7

• https://veritas.com/content/support/en_US/security/VTS21-003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44682 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1593 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44682 · Vendor Advisory
• https://t.me/cvenotify/24326 · Telegram Post
• https://t.me/cibsecurity/33415 · Telegram Post
• https://t.me/cvenotify/27990 · Telegram Post