Lucene search
+L

7 matches found

OSV
OSV
•added 2023/11/27 5:15 p.m.•17 views

CVE-2023-41998

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files...

9.8CVSS6AI score0.15274EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/27 5:15 p.m.•29 views

CVE-2023-41998

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files...

9.8CVSS0.15274EPSS
SaveExploits1References1
Prion
Prion
•added 2023/11/27 5:15 p.m.•26 views

Design/Logic Flaw

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files...

7.5CVSS7.6AI score0.15274EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/11/27 4:50 p.m.•34 views

CVE-2023-41998 Arcserve UDP Unauthenticated RCE

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files...

9.8CVSS9.7AI score0.15274EPSS
SaveExploits1References1
CVE
CVE
•added 2023/11/27 4:50 p.m.•82 views

CVE-2023-41998

Summary: CVE-2023-41998 affects Arcserve UDP prior to 9.2 via the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine allows uploading and executing arbitrary files, enabling unauthenticated remote exploitation as described in multiple sources. Affected product/version: Arcserv...

9.8CVSS9.7AI score0.15274EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/27 12:00 a.m.•19 views

PT-2023-28207 · Arcserve · Arcserve Udp

Name of the Vulnerable Software and Affected Versions: Arcserve UDP versions prior to 9.2 Description: The issue allows an attacker to upload and execute arbitrary files. This can be achieved through the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface, specifically via a routine that...

9.8CVSS9.8AI score0.15274EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/27 12:00 a.m.•8 views

CVE-2023-41998: Unrestricted Upload of File with Dangerous Type

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files...

9.8CVSS8.4AI score0.15274EPSS
SaveExploits1References3
Rows per page
Query Builder