Arctera InfoScale Insecure Deserialization Vulnerability in .NET Remoting Endpoint

A vulnerability exists in Arctera InfoScale versions 7.0 to 8.0.2, where the Windows Plugin_Host service is susceptible to exploitation through insecure deserialization of untrusted messages in a .NET remoting endpoint. This issue arises when applications are set up for Disaster Recovery using the DR wizard. The vulnerability can be mitigated by manually disabling the Plugin_Host service.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected server.

Remediation

To address this vulnerability, manually disable the Windows Plugin_Host service on the affected server.