CVE-2021-26915

ALTO 8.1CVE-2021-26915 · Published 08/02/2021 · updated 17/06/2026

In breve

CVE-2021-26915 è una vulnerabilità ALTO (CVSS 8.1) che riguarda netmotion mobility (netmotionsoftware).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 41.8%, superiore al 98.7% delle vulnerabilità.
Correzione: aggiornare a 12.02, 11.73 o successiva.

Package	Affected versions	Patched versions
netmotion mobility netmotionsoftware	`≥ 12.0, < 12.02< 11.73`	`12.0211.73`

Description

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in webrepdb StatusServlet.

References

ssd-disclosure.com · Exploit
ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce · Exploit
netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020 · Vendor Advisory

Altre vulnerabilità di netmotion mobility

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netmotion mobility

netmotionsoftware

≥ 12.0, < 12.02< 11.73

12.0211.73

Altre vulnerabilità di netmotion mobility

Vedi tutto →