CVE-2011-3011: ca arcserve_d2d

CVSS: 5.0v2.0MediumModified

Published 15-08-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-3011 is a medium (CVSS 5.0) vulnerability in ca arcserve_d2d. EPSS estimates a 71.63% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

44/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

71.63%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3reference, exploit-database, metasploit

Timeline

15-08-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

71.63%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 71.63% on 20-09-2026

20-09-202620-10-2026

EPSS score

71.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalwindowsVerified
CA Arcserve D2D - GWT RPC Credential Information Disclosure (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
CA Arcserve D2D GWT RPC Credential Information Disclosure
exploit/windows/http/ca_arcserve_rpc_authbypass
Maturity: weaponized