Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-5328

27
FAUCET Score

CVE-2007-5328 describes a critical vulnerability in the Message Engine RPC service of CA BrightStor ARCServe BackUp versions 9.01 through R11.5 and Enterprise Backup r10.5. This flaw, categorized as "Privileged function exposure," allows unauthenticated attackers to execute arbitrary code by manipulating the file system and registry through insecure method calls. With a CVSS score of 10.0, this vulnerability presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
9.01CPE matchmatch criteria
cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*
10.5CPE matchmatch criteria
cpe:2.3:a:broadcom:brightstor_arcserve_backup:10.5:*:*:*:*:*:*:*
11CPE matchmatch criteria
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11:*:*:*:*:*:*:*
11.1CPE matchmatch criteria
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
11.5CPE matchmatch criteria
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
6.97%
Probability of exploitation in next 30 days
EPSS Percentile
93.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0697 is in the 89th percentile among its peer group of 51,551 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

fuji_electricvendor investigatingvia llm_extracted
langgeniusvendor investigatingvia llm_extracted
lizardbytevendor investigatingvia llm_extracted
opensipsvendor investigatingvia llm_extracted

Vendor Advisories (4)

langgeniusllm-langgenius-aa4526dab369bb63CRITICAL

CA BrightStor ARCServe Backup Message Engine RPC Service Arbitrary Code Execution

Oct 10, 2007
lizardbytellm-lizardbyte-5ab519de28bac3beCRITICAL

CA BrightStor ARCServe Backup Message Engine RPC Service Arbitrary Code Execution

Oct 10, 2007
opensipsllm-opensips-d62e14f561a58345CRITICAL

CA BrightStor ARCServe Backup Message Engine RPC Service Arbitrary Code Execution

Oct 10, 2007
fuji_electricllm-fuji_electric-95bd354de1845bddCRITICAL

CA BrightStor ARCServe Backup Message Engine RPC Service Arbitrary Code Execution

Oct 10, 2007

References

secunia.com / advisories/27192
exchange.xforce.ibmcloud.com / vulnerabilities/37067
supportconnectw.ca.com / public/storage/infodocs/basb-secnotice.asp
Patch
securityfocus.com / archive/1/482121/100/0/threaded
securityfocus.com / archive/1/484229/100/0/threaded
securityfocus.com / bid/26015
securitytracker.com / id
vupen.com / english/advisories/2007/3470
zerodayinitiative.com / advisories/ZDI-07-069.html