VulnerabilityModified

CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged…

HIGH 10.0EPSS 6.97%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (6.97%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 6.97% probability · 94th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: broadcom/brightstor arcserve backup · broadcom/brightstor enterprise backup
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.