Is CVE-2015-4068 actively exploited?

Yes. CVE-2015-4068 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2015-4068 be exploited remotely?

The attack vector of CVE-2015-4068 has not been classified yet.

What is the CVSS score of CVE-2015-4068?

CVE-2015-4068 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2015-4068

HIGHCISA KEVIN THE WILD

CVE-2015-4068

Published: March 25, 2022

EPSS:80.85%probability of exploitation in 30 daysPercentile:99.1th

Official Description

Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.

NVD Source

CISA KEV Advisory

Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability

Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.

Added to KEV: 2022-03-25Federal patch deadline: 2022-04-15

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

Arcserve UDP contains a directory traversal vulnerability that allows remote attackers to access sensitive information or cause a denial of service. With an EPSS score of 0.80852 and confirmed exploitation, this flaw poses a significant risk to data confidentiality and system availability.

This vulnerability is actively exploited in the wild and is included in CISA's KEV catalog, indicating a high likelihood of successful attacks. The remote nature of the exploit makes it particularly dangerous.

Recommended Action

Users of Arcserve UDP should apply all available security patches and updates to address this directory traversal vulnerability. Implement network segmentation and restrict access to Arcserve UDP instances to trusted networks.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2015-4068 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2015-4068 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.