CVE-2025-34523

{"id": "CVE-2025-34523", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-34523", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-08-29T03:55:19.615644Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Arcserve", "modules": ["input parsing logic"], "product": "Unified Data Protection (UDP)", "versions": [{"status": "unaffected", "version": "10.2"}, {"status": "affected", "version": "8.0", "versionType": "custom", "lessThanOrEqual": "10.1"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.*"}], "defaultStatus": "unaffected"}]}], "published": "2025-08-27T22:15:58.210", "references": [{"url": "https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection (UDP). This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted data, a remote attacker can corrupt heap memory, potentially causing a denial of service or enabling arbitrary code execution depending on the memory layout and exploitation techniques used. This vulnerability is similar in nature to CVE-2025-34522 but affects a separate code path or component. No user interaction is required, and exploitation occurs in the context of the vulnerable process. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento de b\u00fafer basado en heap-based existe en las rutinas de manejo de entrada orientadas a la red de Arcserve Unified Data Protection (UDP). Este fallo es alcanzable sin autenticaci\u00f3n y resulta de una comprobaci\u00f3n de l\u00edmites inadecuada al procesar entrada controlada por el atacante. Al enviar datos especialmente manipulados, un atacante remoto puede corromper la memoria del heap, potencialmente causando una denegaci\u00f3n de servicio o permitiendo la ejecuci\u00f3n de c\u00f3digo arbitrario dependiendo de la disposici\u00f3n de la memoria y las t\u00e9cnicas de explotaci\u00f3n utilizadas. Esta vulnerabilidad es similar en naturaleza a CVE-2025-34522 pero afecta a una ruta de c\u00f3digo o componente separado. No se requiere interacci\u00f3n del usuario, y la explotaci\u00f3n ocurre en el contexto del proceso vulnerable. Esta vulnerabilidad afecta a todas las versiones de UDP anteriores a la 10.2. UDP 10.2 incluye los parches necesarios y no requiere ninguna acci\u00f3n. Las versiones 8.0 a 10.1 son compatibles y requieren la aplicaci\u00f3n del parche o la actualizaci\u00f3n a la 10.2. Las versiones 7.x y anteriores no son compatibles o est\u00e1n fuera de mantenimiento y deben actualizarse a la 10.2 para remediar el problema."}], "lastModified": "2026-09-26T00:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53D70153-E6B7-4D27-83AA-77817EBBBC3E", "versionEndExcluding": "7.0"}, {"criteria": "cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7644D867-3950-4EBF-9CBE-644458C26801", "versionEndExcluding": "10.2", "versionStartIncluding": "8.0"}, {"criteria": "cpe:2.3:a:arcserve:udp:7.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CAB17ED-9FBC-475F-8206-3BC8E672C719"}, {"criteria": "cpe:2.3:a:arcserve:udp:7.0:update_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8672F05B-B0FC-4A81-8D5B-2A7DE8C6D92D"}, {"criteria": "cpe:2.3:a:arcserve:udp:7.0:update_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1379C0DE-8BB0-47FF-AE56-6E54F125E5A0"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}