{"id":"CVE-2024-0801","published":"2024-03-13T19:04:47Z","modified":"2024-08-15T16:36:30Z","title":"Unauthenticated DoS in Arcserve Unified Data Protection","vendor":"Arcserve","product":"Unified Data Protection","tier":"core","eol":null,"affectedVersions":[{"vendor":"Arcserve","product":"Unified Data Protection","versions":["<= 9.2","<= 8.1"]}],"description":{"text":"A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll.","provenance":"source","from":"CVE.org"},"summary":{"text":"A denial-of-service flaw exists in the ASNative.dll component of Arcserve Unified Data Protection, affecting versions 9.2 and 8.1. An attacker with network access can trigger the denial of service without authentication, user interaction, or any special configuration.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T22:22:09Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.41843,"percentile":0.98689,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-05-09","exploitedFirstSeen":"2024-05-09","ransomware":false,"evidence":[{"url":"https://digital.nhs.uk/cyber-alerts/2024/cc-4487","date":"2024-05-09"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-75","name":"Failure to Sanitize Special Elements into a Different Plane"}],"references":[{"url":"https://www.tenable.com/security/research/tra-2024-07","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-16588","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16588","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2024-0801","name":"Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll","severity":"high","path":"http/cves/2024/CVE-2024-0801.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0801.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-03-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-0801","provenance":"source"},{"date":"2024-05-09","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://digital.nhs.uk/cyber-alerts/2024/cc-4487","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":65.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 905 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.74,"detail":"percentile 0.9869"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}