NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC4

CVE-2024-0799

CVSS 3.1: 9.8 critical
EPSS: 4%p91
Published: Mar 13, 2024 · Mar 13, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-0799 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin() function within wizardLogin.

Vendors: arcserve

Products: udp

Weakness: CWE-287

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news

3 stories

Week in review: Cybersecurity job openings, hackers use 1-day flaws to drop custom Linux malware

Help Net SecurityMar 17, 00:00 UTC · Mar 17, 2024MalwareExploitedCVE-2024-0799 CVE-2024-0800 CVE-2023-487882 · 1 read

60

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024VulnerabilityExploitedCVE-2024-21407 CVE-2024-21408 CVE-2024-21400+93 · 1 read

60

PoC for critical Arcserve UDP vulnerabilities published (CVE-2024-0799, CVE-2024-0800)

Help Net SecurityMar 14, 00:00 UTC · Mar 14, 2024Exploit / PoCCVE-2024-0799 CVE-2024-0800 CVE-2024-08013 · 1 read

60