Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-3216

77
FAUCET Score

CVE-2007-3216 describes multiple buffer overflow vulnerabilities within the LGServer component of CA BrightStor ARCserve Backup for Laptops and Desktops r11.1. These flaws allow remote, unauthenticated attackers to execute arbitrary code by sending specially crafted arguments to numerous LGServer commands. With a CVSS score of 10.0, this vulnerability is critical, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity. Although not listed on the KEV catalog, multiple Metasploit modules and ExploitDB entries confirm the existence of public exploit code, indicating a high potential for exploitation despite limited community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
11.1CPE matchmatch criteria
cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
59.19%
Probability of exploitation in next 30 days
EPSS Percentile
99.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Metasploit: CA BrightStor ARCserve for Laptops and Desktops LGServer Multiple Commands Buffer Overflow · Jun 6, 2007
ExploitDB: EDB-16415 · Mar 10, 2011
This CVE's current EPSS score of 0.5919 is in the 98th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

labs.idefense.com / intelligence/vulnerabilities/display.php
osvdb.org / 35329
research.eeye.com / html/advisories/published/AD20070920.html
research.eeye.com / html/advisories/upcoming/20070604.html
secunia.com / advisories/25606
Vendor Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/34805
supportconnectw.ca.com / public/sams/lifeguard/infodocs/bsabld-securitynotice.asp
supportconnectw.ca.com / public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp
ca.com / us/securityadvisor/newsinfo/collateral.aspx
Vendor Advisory
ca.com / us/securityadvisor/vulninfo/vuln.aspx
Vendor Advisory
securityfocus.com / archive/1/480252/100/100/threaded
securityfocus.com / bid/24348
securitytracker.com / id
securitytracker.com / id
vupen.com / english/advisories/2007/2121
Vendor Advisory