CVE-2015-4068

Arcserve UDP suffered a directory traversal vulnerability allowing remote attackers to steal data or cause denial of service.

Arcserve Unified Data Protection (UDP) contained a directory traversal flaw enabling remote attackers to access sensitive files or disrupt service. DIB organizations must ensure backup and recovery software is patched, as unpatched vulnerabilities in critical infrastructure can lead to data exfiltration or ransomware footholds. This failure highlights the risk of relying on legacy or unpatched enterprise software.

Shame score — A known directory traversal vulnerability in critical backup software was actively exploited in the wild, indicating a failure to patch a high-impact flaw in time.