CVE-2023-41999

CVE-2023-41999 is a critical authentication bypass vulnerability affecting Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can exploit this flaw to obtain a valid authentication identifier, granting them full access to the management console and the ability to perform authenticated tasks. With a CVSS score of 9.8, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Despite its criticality, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.