CVE-2024-0801

Unauthenticated DoS in Arcserve Unified Data Protection

State
Published
Severity
7.5 High
Published
Mar 13, 2024
Updated
Aug 15, 2024
Reserved
Jan 22, 2024

Read the record on cve.org

Description

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Htenable

Weaknesses

  • CWE-75 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Affected Products

ProductVersions
Unified Data ProtectionArcserve
  • 9.2 and earlierAffected
  • 8.1 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.