CVE-2021-26915 | BDVDB-2026-148751 Detail

Description#

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in webrepdb StatusServlet.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ssd-disclosure.com/?p=4676
https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020
https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/

Exploit#

No public exploit known

History#

Version 12021-02-08Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.