CVE-2007-1785: The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attacker...

Security readout for executives and security teams

This vulnerability affects an old CA BrightStor ARCserve Backup media server component. A remote attacker could send malformed RPC traffic that causes code execution. Backup servers often hold privileged access and sensitive data, so any still-running 11.5 SP2 build 4237 instance should be treated as a serious legacy risk. Exposure is most likely in legacy Windows backup environments that still run CA BrightStor ARCserve Backup 11.5 SP2 build 4237 or inherited media server components. Internet exposure is not required for risk if RPC is reachable from internal networks. Prioritize this if legacy ARCserve Backup servers remain in production or reachable from broad internal networks. The business risk is high because compromise of backup infrastructure can undermine recovery, expose sensitive data, and provide privileged footholds. Mitigation focus: Inventory ARCserve Backup installations and identify version 11.5 SP2 build 4237.; Check CA/Broadcom vendor guidance for the archived security notice and available fixes.; Restrict RPC access to backup servers to trusted administration networks only..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.