CVE-2024-0799

PoC —1

CVSS 3.1

9.8 critical

EPSS

4%p91

Published

Mar 13, 2024 (Mar 13, 2024)

Modified

Jun 17, 2026

Description

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin() function within wizardLogin.

Vendors: arcserve
Products: udp
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news3 stories

Week in review: Cybersecurity job openings, hackers use 1-day flaws to drop custom Linux malware

Help Net SecurityMar 17, 00:00 UTC · Mar 17, 2024Malware in the wildCVE-2024-0799 CVE-2024-0800 CVE-2023-48788

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Vulnerability in the wildCVE-2024-21407 CVE-2024-21408 CVE-2024-21400+9 CVEs

PoC for critical Arcserve UDP vulnerabilities published (CVE-2024-0799, CVE-2024-0800)

Help Net SecurityMar 14, 00:00 UTC · Mar 14, 2024Exploit / PoC CVE-2024-0799 CVE-2024-0800 CVE-2024-0801