Read the docs
TI-2023-22381 Aliases CVE-2023-42000GHSA-4xpq-wqf9-p6mv

Arcserve UDP Agent Unauthenticated Path Traversal File Upload

Priority MEDIUM 45CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

Why it matters now

EPSS 0.01471 73rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Arcserve UDP (Arcserve): 9.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ArcserveArcserve UDPbefore 9.29.2Patch availableCNA
  • Arcserve UDP VendorArcserve Affected before 9.2 Fixed in 9.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*before 9.2VulnerableArcserve
  • cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:* Versions before 9.2 Vulnerable ·Arcserve

Remediation

  • Fix · CNA Arcserve UDP (Arcserve) Fixed in 9.2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Arcserve UDP 9.2

    3 records Highest priority Priority MEDIUM 3 MEDIUM

    Other records, highest priority first

    • TI-2023-22379 Arcserve UDP Unauthenticated RCEPriority MEDIUM 58
    • TI-2023-22380 Arcserve UDP Management Authentication BypassPriority MEDIUM 45
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-42000
  2. 2026-10-03 Alias added: GHSA-4xpq-wqf9-p6mv

References

Exploit 1

  • TI-2015-03429 Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote… KEVCVSS 3.1CRITICAL 9.1
  • TI-2024-00736 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection CVSS 3.1CRITICAL 9.8
  • TI-2023-11421 Arcserve UDP through 9.0.6034 allows authentication bypass. CVSS 3.1CRITICAL 9.8
  • TI-2024-00737 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection CVSS 3.1HIGH 8.8
  • TI-2024-00738 Unauthenticated DoS in Arcserve Unified Data Protection CVSS 3.1HIGH 7.5
  • TI-2023-22379 Arcserve UDP Unauthenticated RCE CVSS 3.1CRITICAL 9.8
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences