CVE-2021-26915

Name of the Vulnerable Software and Affected Versions: NetMotion Mobility versions prior to 11.73 NetMotion Mobility versions 12.x prior to 12.02

Description: The issue allows unauthenticated remote attackers to execute arbitrary code as SYSTEM due to Java deserialization in the webrepdb StatusServlet.

Recommendations: For versions prior to 11.73, update to version 11.73 or later. For versions 12.x prior to 12.02, update to version 12.02 or later. As a temporary workaround, consider disabling the StatusServlet until a patch is available.