CVE-2007-1785: broadcom brightstor_arcserve_backup
Vulnerability summary
CVE-2007-1785 is a high (CVSS 7.1) vulnerability in broadcom brightstor_arcserve_backup. EPSS estimates a 15.35% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 31-03-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
15.35%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 15.35% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Remote Code
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Broadcom1 product
- brightstor_arcserve_backup9.01 | 11.1 | 11.5 | 11.5:sp1 | 11.5:sp2
Ca1 product
2 vendors · 2 products
References
13 links- www.shirkdog.us/shk-004.htmlX Refsource MISC
- supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.aspX Refsource CONFIRM
- www.shirkdog.us/camediasvrremote.pyX Refsource MISC