PT-2024-10282 · Veritas · Veritas Enterprise Vault

Published 2024-07-24 · Updated 2024-12-11 · CVE-2024-53911

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Veritas Enterprise Vault versions prior to 15.2

Description An issue in the server allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. This is related to shortcomings in the deserialization mechanism of the EVStgOfflineOpns service. The exploitation of this issue may allow a remote attacker to execute arbitrary code by sending specially crafted data.

Recommendations For versions prior to 15.2, upgrade to version 15.2 or later to mitigate the risk of system compromise. As a temporary workaround, consider restricting access to the .NET Remoting TCP port to minimize the risk of exploitation.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-00689

CVE-2024-53911

ZDI-24-1667

Affected Products

Veritas Enterprise Vault

References · 11

• https://osv.dev/vulnerability/CVE-2024-53911 · Vendor Advisory
• https://veritas.com/content/support/en_US/security/VTS24-014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53911 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1667 · Security Note
• https://bdu.fstec.ru/vul/2025-00689 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-CAN-24339 · Note
• https://twitter.com/TheZDIBugs/status/1866901599899078798 · Twitter Post
• https://twitter.com/CVEnew/status/1860794226583142601 · Twitter Post
• https://t.me/cvenotify/102471 · Telegram Post
• https://twitter.com/oktsec/status/1860966063485112824 · Twitter Post
• https://twitter.com/CveFindCom/status/1860791289811194212 · Twitter Post