CVE-2007-5006: Broadcom Brightstor Arcserve Backup Laptops Desktops

High severity, CVSS 10.0. EPSS: 21.2% chance of exploitation in the next 30 days.

Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.

Affected products

• Broadcom Brightstor Arcserve Backup Laptops Desktops: version 4.0 only; version 11.0 only; version 11.1 only; version 11.5 only
• Broadcom Desktop Management Suite: version 11.0 only; version 11.1 only; version 11.2 only
• Ca Protection Suites: version r2 only

Published 2007-10-01. Last modified 2026-06-16.