Description
Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arcserve | Arcserve UDP | < 9.2 | 9.2 |
Advisories 1
- WID-SEC-2023-3031 Arcserve Unified Data Protection: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 30, 2023