CVE-2007-5328

CRITICAL 10.0CVE-2007-5328 · Published 13/10/2007 · updated 16/06/2026

In short

CVE-2007-5328 is a CRITICAL (CVSS 10.0) vulnerability affecting brightstor arcserve backup (broadcom), brightstor enterprise backup (broadcom).
Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
brightstor arcserve backup broadcom	`= 10.5= 11= 11.1= 11.5= 9.01`	No fix yet
brightstor enterprise backup broadcom	`= 10.5`	No fix yet

Description

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."

References

More vulnerabilities in brightstor arcserve backup

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2007-5328 is a CRITICAL (CVSS 10.0) vulnerability affecting brightstor arcserve backup (broadcom), brightstor enterprise backup (broadcom).

Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.1% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

brightstor arcserve backup

broadcom

= 10.5= 11= 11.1= 11.5= 9.01

No fix yet

brightstor enterprise backup

broadcom

= 10.5

No fix yet

More vulnerabilities in brightstor arcserve backup

See all →