PT-2024-15834 · Arcserve · Arcserve Unified Data Protection

Published 2024-03-13 · Updated 2026-04-13 · CVE-2024-0801

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection versions 8.1 through 9.2

Description A denial of service issue exists in the ASNative.dll component.

Recommendations For versions 8.1 through 9.2, consider restricting access to the ASNative.dll component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-75

Related Identifiers

CVE-2024-0801

Affected Products

Arcserve Unified Data Protection

References · 10

• 🔥 https://tenable.com/security/research/tra-2024-07 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-0801 · Security Note
• https://osv.dev/vulnerability/CVE-2024-0801 · Vendor Advisory
• https://twitter.com/ctiwatchcloud/status/2043726009669701836 · Twitter Post
• https://t.me/true_secator/5733 · Telegram Post
• https://t.me/cvenotify/73740 · Telegram Post
• https://twitter.com/CCBalert/status/1790001879432233332 · Twitter Post
• https://twitter.com/CCBalert/status/1768579319775834571 · Twitter Post
• https://t.me/cvenotify/73788 · Telegram Post
• https://t.me/cveNotify/138605 · Telegram Post