{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Arcserve vulnerabilities","home_page_url":"https://patchfirst.co/vendor/arcserve/","feed_url":"https://patchfirst.co/feed/vendor/arcserve.json","description":"New and newly exploited Arcserve CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2024-0799","url":"https://patchfirst.co/cve/CVE-2024-0799/","title":"CVE-2024-0799: Authentication Bypass via wizardLogin in Arcserve Unified Data Protection","content_text":"Arcserve · Unified Data Protection. Not in CISA KEV. EPSS 4.3% (higher than 91.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 65.1 of 100.","summary":"Authentication Bypass via wizardLogin in Arcserve Unified Data Protection","date_published":"2024-03-13T00:00:00.000Z","date_modified":"2025-12-16T18:13:23.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.1,"kev":null,"epss":{"score":0.04342,"percentile":0.91201},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Arcserve","product":"Unified Data Protection","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-0801","url":"https://patchfirst.co/cve/CVE-2024-0801/","title":"CVE-2024-0801: Unauthenticated DoS in Arcserve Unified Data Protection","content_text":"Arcserve · Unified Data Protection. Not in CISA KEV. EPSS 41.8% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 65.0 of 100.","summary":"Unauthenticated DoS in Arcserve Unified Data Protection","date_published":"2024-03-13T00:00:00.000Z","date_modified":"2024-08-15T16:36:30.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65,"kev":null,"epss":{"score":0.41843,"percentile":0.98687},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Arcserve","product":"Unified Data Protection","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-0800","url":"https://patchfirst.co/cve/CVE-2024-0800/","title":"CVE-2024-0800: Authentication Bypass via wizardLogin in Arcserve Unified Data Protection","content_text":"Arcserve · Unified Data Protection. Not in CISA KEV. EPSS 1.0% (higher than 63.8% of CVEs). CVSS 8.8 HIGH. Priority 53.9 of 100.","summary":"Authentication Bypass via wizardLogin in Arcserve Unified Data Protection","date_published":"2024-03-13T00:00:00.000Z","date_modified":"2025-12-16T18:13:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":53.9,"kev":null,"epss":{"score":0.01034,"percentile":0.63811},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Arcserve","product":"Unified Data Protection","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2015-4068#kev","url":"https://patchfirst.co/cve/CVE-2015-4068/","title":"[KEV] CVE-2015-4068: Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","content_text":"Arcserve · Unified Data Protection (UDP). In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 63.6% (higher than 99.22% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 64.2 of 100.","summary":"Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2026-06-17T00:26:43.000Z","tags":["kev","T1190","T1005","T1499.004"],"_patchfirst":{"reason":"kev","priority":64.2,"kev":{"dateAdded":"2022-03-25","ransomware":false},"epss":{"score":0.63643,"percentile":0.99215},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Arcserve","product":"Unified Data Protection (UDP)","techniqueIds":["T1190","T1005","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-27858","url":"https://patchfirst.co/cve/CVE-2020-27858/","title":"CVE-2020-27858: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve…","content_text":"Arcserve · D2D. Not in CISA KEV. EPSS 73.8% (higher than 99.48% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.","summary":"This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve…","date_published":"2021-01-20T00:00:00.000Z","date_modified":"2024-08-04T16:25:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.1,"kev":null,"epss":{"score":0.73828,"percentile":0.99476},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"Arcserve","product":"D2D","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}