The server in CA ARCserve Backup r12.5 r15 and r16 on Windows does not properly process RPC requests which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request.