PT-2021-17169
CVE-2021-26912
·
Published
2021-02-08
·
Updated
2021-02-23
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
NetMotion Mobility versions prior to 11.73
NetMotion Mobility versions 12.x prior to 12.02
Description:
The issue allows unauthenticated remote attackers to execute arbitrary code as SYSTEM due to Java deserialization in the SupportRpcServlet.
Recommendations:
For versions prior to 11.73, update to version 11.73 or later.
For versions 12.x prior to 12.02, update to version 12.02 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾