This vulnerability represents an authentication bypass that allows remote attackers to gain access to the MArc.Store.Remoting.exe process without any credentials. The flaw is rooted in missing authorization checks (CWE‑862) and can be used together with other weaknesses to execute code with SYSTEM privileges. The result is complete loss of confidentiality, integrity, and availability for the affected system.

The affected software is GFI Archiver, with the vulnerability arising in the MArc.Store.Remoting.exe component that listens on port 8018. No specific product version is listed, so all installations of GFI Archiver with this component are potential targets.

The CVSS score of 9.8 classifies this as a critical vulnerability, while the EPSS score of less than 1% indicates a currently low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit it remotely over the network by contacting the unprotected port 8018, without needing any prior authentication. Because the flaw permits unrestricted access to privileged functionality, the risk to any system exposing this port is substantial.