CVE-2025-34522

{
  "id": "CVE-2025-34522",
  "sourceIdentifier": "[email protected]",
  "published": "2025-08-27T22:15:58.040",
  "lastModified": "2026-10-23T22:10:00.160",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be triggered without authentication by sending specially crafted input to the target system. Improper bounds checking allows an attacker to overwrite heap memory, potentially leading to application crashes or remote code execution. Exploitation occurs in the context of the affected process and does not require user interaction. The vulnerability poses a high risk due to its pre-authentication nature and potential for full compromise. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de desbordamiento de búfer basado en heap-based existe en la lógica de análisis de entrada de Arcserve Unified Data Protection (UDP). Este fallo puede ser activado sin autenticación enviando una entrada especialmente diseñada al sistema objetivo. La comprobación de límites incorrecta permite a un atacante sobrescribir la memoria heap, lo que podría llevar a fallos de la aplicación o a la ejecución remota de código. La explotación ocurre en el contexto del proceso afectado y no requiere interacción del usuario. La vulnerabilidad plantea un alto riesgo debido a su naturaleza de pre-autenticación y su potencial de compromiso total. Esta vulnerabilidad afecta a todas las versiones de UDP anteriores a la 10.2. UDP 10.2 incluye los parches necesarios y no requiere ninguna acción. Las versiones 8.0 a 10.1 son compatibles y requieren la aplicación de parches o la actualización a la 10.2. Las versiones 7.x y anteriores no son compatibles o están fuera de mantenimiento y deben actualizarse a la 10.2 para remediar el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Arcserve",
          "product": "Unified Data Protection (UDP)",
          "defaultStatus": "unaffected",
          "modules": [
            "input parsing logic"
          ],
          "versions": [
            {
              "version": "10.2",
              "status": "unaffected"
            },
            {
              "version": "8.0",
              "lessThanOrEqual": "10.1",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThanOrEqual": "7.*",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 9.2,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-08-29T03:55:20.727536Z",
          "id": "CVE-2025-34522",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "7.0",
              "matchCriteriaId": "53D70153-E6B7-4D27-83AA-77817EBBBC3E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "8.0",
              "versionEndExcluding": "10.2",
              "matchCriteriaId": "7644D867-3950-4EBF-9CBE-644458C26801"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:arcserve:udp:7.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "1CAB17ED-9FBC-475F-8206-3BC8E672C719"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:arcserve:udp:7.0:update_1:*:*:*:*:*:*",
              "matchCriteriaId": "8672F05B-B0FC-4A81-8D5B-2A7DE8C6D92D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:arcserve:udp:7.0:update_2:*:*:*:*:*:*",
              "matchCriteriaId": "1379C0DE-8BB0-47FF-AE56-6E54F125E5A0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}