← voltar
CVE-2021-26914

CVE-2021-26914

40Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 78%
da publicação à arma0 dias
Publicada no NVD8 de fev.
metasploit8 de fev.
probabilidade de exploração
78%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.
Produtos afetados
n/a · n/a
Referências
http://packetstormsecurity.com/files/162617/NetMotion-Mobility-Server-MvcUtil-Java-Deserialization.htmlhttps://ssd-disclosure.com/?p=4676https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020