CVE-2023-41998

CRITICAL

Arcserve UDP Unauthenticated RCE

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-41998 has a selected CVSS score of 9.8 (critical).

Description

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

Arcserve UDP

Browse Arcserve / Arcserve UDP

Default status: unaffected

CVE ListBefore 9.2affected

References

2