PT-2024-8778 · Veritas · Veritas Enterprise Vault

Published 1999-01-01 · Updated 2024-12-11 · CVE-2024-53915

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions prior to 15.2

Description: The issue is related to the deserialization mechanism in the Veritas Enterprise Vault server, allowing remote attackers to execute arbitrary code by sending specially crafted data to the .NET Remoting TCP port. This can be achieved by deserializing untrusted data received on the TCP port, enabling remote code execution.

Recommendations: For versions prior to 15.2, update to version 15.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the .NET Remoting TCP port to minimize the risk of exploitation.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2024-10394

CVE-2024-53915

DOTNETREMOTINGCHECK

ZDI-24-1663

Affected Products

Veritas Enterprise Vault

References · 9

• https://bdu.fstec.ru/vul/2024-10394 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1663 · Security Note
• https://osv.dev/vulnerability/CVE-2024-53915 · Vendor Advisory
• https://veritas.com/content/support/en_US/security/VTS24-014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53915 · Security Note
• https://twitter.com/CveFindCom/status/1860791215244836908 · Twitter Post
• https://twitter.com/dailycve/status/1862624932112298319 · Twitter Post
• https://twitter.com/CVEnew/status/1860794230802681880 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1866901594811355423 · Twitter Post