Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-41998

Arcserve UDP Unauthenticated RCE

Description

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arcserve Arcserve UDP

Default version status: unaffected

  • 0 to < 9.2affected

References