CVE-2024-53909: Critical severity symantec enterprise vault vulnerability
Published Nov 24, 2024
·Updated
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
Affected Software
1 affected component
Veritas Enterprise Vault<15.2
Event History
Nov 24, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 26, 2024
News Published
via The Register·10:29 AM
News Published
via The Register·10:32 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-53909?
CVE-2024-53909 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-53909?
To fix CVE-2024-53909, upgrade Veritas Enterprise Vault to version 15.2 or later.
3
What impact does CVE-2024-53909 have on affected systems?
CVE-2024-53909 allows remote attackers to execute arbitrary code on the server, which can compromise system integrity.
4
Which versions of Veritas Enterprise Vault are affected by CVE-2024-53909?
CVE-2024-53909 affects all versions of Veritas Enterprise Vault prior to 15.2.
5
Is CVE-2024-53909 exploitable over the internet?
Yes, CVE-2024-53909 can be exploited remotely if the vulnerable service is accessible over the internet.