APP: Western Digital Arkeia 11.0.13 Remote Code Execution

This signature detects attempts to attack against Arkeia Network Backup Agent. Successful attack could result to Remote Code Execution.

Extended Description

The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via a series of crafted requests involving the ARKFS_EXEC_CMD operation.

Affected Products

Arkeia western_digital_arkeia

Short Name
APP:WD-CVE-2015-7709-RCE
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
11.0.13 Arkeia CVE-2015-7709 Code Digital Execution Remote Western
Release Date
09/26/2019
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3337
Port
TCP/617
False Positive
Unknown
Vendors

Arkeia

CVSS Score

10.0

Found a potential security threat?