Skip to main content

Udp CVE-2024-0801

HIGH
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) (CWE-75)
2024-03-13 vulnreport@tenable.com
Denial Of Service Udp
7.5
CVSS 3.1 · Vendor: tenable
Share

Severity by source

Vendor (tenable) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (tenable) · only source for this CVE.

CVSS VectorVendor: tenable

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 13, 2024 - 19:15 cve.org
HIGH 7.5

DescriptionCVE.org

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll.

AnalysisAI

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-75. A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll. Affected products include: Arcserve Udp.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Udp

View all
CVE-2024-0799 CRITICAL POC
9.8 Mar 13

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui
CVE-2023-42000 CRITICAL POC
9.8 Nov 27

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServl
CVE-2023-41999 CRITICAL POC
9.8 Nov 27

An authentication bypass exists in Arcserve UDP prior to version 9.2. Rated critical severity (CVSS 9.8), this vulnerabi
CVE-2023-41998 CRITICAL POC
9.8 Nov 27

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface.

CVE-2023-26258 CRITICAL POC
9.8 Jul 03

Arcserve UDP through 9.0.6034 allows authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is re
CVE-2024-0800 HIGH POC
8.8 Mar 13

A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.
CVE-2018-18659 HIGH
7.5 Oct 26

An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. Rated high severity (CVSS 7.5),

CVE-2018-18658 HIGH
7.5 Oct 26

An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. Rated high severity (CVSS 7.5),

CVE-2018-18657 HIGH
7.5 Oct 26

An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. Rated high severity (CVSS 7.5),

CVE-2018-18660 MEDIUM
6.1 Oct 26

An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. Rated medium severity (CVSS 6.1)
CVE-2025-34522 CRITICAL
9.2 Aug 27

A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP).

CVE-2025-34521 MEDIUM
4.8 Aug 27

A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the Arcserve Unified Data Protection

Same weakness CWE-75 – Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

View all
CVE-2026-29042 CRITICAL POC
9.8
CVE-2024-35373 CRITICAL POC
9.8
CVE-2021-22910 CRITICAL POC
9.8
CVE-2021-22911 CRITICAL POC
9.8
CVE-2024-31809 HIGH POC
8.8
CVE-2023-27533 HIGH POC
8.8
CVE-2023-23912 HIGH POC
8.8
CVE-2021-39174 HIGH POC
8.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2024-0801 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy