CVE-2011-3011

CVE-2011-3011 describes a critical session handling vulnerability in CA ARCserve D2D r15's BaseServiceImpl.class, allowing remote attackers to obtain credentials and execute arbitrary commands. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) and a FAUCET Risk Score of 98/100, this vulnerability is easily exploitable over the network without authentication, leading to potential compromise of confidentiality and system control. While not listed in KEV or actively exploited, a Metasploit module and ExploitDB entry confirm the existence of public exploit code, indicating a high potential for exploitation. Despite the availability of exploit code, there is minimal community discussion or media coverage surrounding this CVE.