Veritas Enterprise Vault Code Issue Vulnerability (CNVD-2021-95590)

Veritas Enterprise Vault is an enterprise-class file protection, archive automation software from Veritas, Inc. A security vulnerability exists in Veritas Enterprise Vault 14.1.2 and prior versions, where Enterprise Vault applications start multiple services that listen on NET Remoting TCP port to listen for commands from the client application. Due to the inherent deserialization behavior of the .NET Remoting service, an attacker could exploit both the TCP remote service and the local IPC service on the Enterprise Vault server.