Is CVE-2008-1786 being actively exploited?

CVE-2008-1786 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2008-1786?

CVE-2008-1786 has a CVSS 2.0 base score of 9.3 (HIGH).

CVE-2008-1786

HIGH · CVSS 9.3EPSS 6.8%EU EUVD

The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.

Key facts

CVSS score: 9.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-94
EPSS score: 6.8% (94th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2008-1786)
Published: April 16, 2008
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2008-1786 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

computer associates / arcserve backup laptops and desktops
computer associates / desktop and server management
computer associates / desktop and server management
computer associates / desktop and server management
computer associates / desktop and server management
computer associates / desktop and server management
computer associates / desktop management suite
computer associates / desktop management suite
computer associates / desktop management suite
computer associates / desktop management suite
computer associates / unicenter asset management
computer associates / unicenter asset management
computer associates / unicenter asset management
computer associates / unicenter asset management
computer associates / unicenter asset management
computer associates / unicenter desktop management bundle
computer associates / unicenter desktop management bundle
computer associates / unicenter desktop management bundle
computer associates / unicenter desktop management bundle
computer associates / unicenter desktop management bundle
computer associates / unicenter remote control
computer associates / unicenter remote control
computer associates / unicenter remote control
computer associates / unicenter remote control
computer associates / unicenter remote control
computer associates / unicenter software delivery
computer associates / unicenter software delivery
computer associates / unicenter software delivery
computer associates / unicenter software delivery
computer associates / unicenter software delivery

References

http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerability.aspx(Patch, Vendor Advisory)
http://secunia.com/advisories/29837(Vendor Advisory)
http://www.kb.cert.org/vuls/id/684883(US Government Resource)
http://www.securityfocus.com/archive/1/490959/100/0/threaded
http://www.securityfocus.com/bid/28809(Patch)
http://www.securitytracker.com/id?1019872
http://www.vupen.com/english/advisories/2008/1249/references(Vendor Advisory)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41853
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256(Patch, Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain