cbcvebase.

Netmotionsoftware Netmotion Mobility vulnerabilities

4 known vulnerabilities affecting netmotionsoftware/netmotion_mobility.

Total CVEs
4
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH4

Vulnerabilities

Page 1 of 1
CVE-2021-26914P1HIGHCVSS 8.1PoCfixed in 11.73≥ 12.0, < 12.022021-02-08
CVE-2021-26914 [HIGH] CWE-502 CVE-2021-26914: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to exe NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.
nvd
CVE-2021-26915P2HIGHCVSS 8.1fixed in 11.73≥ 12.0, < 12.022021-02-08
CVE-2021-26915 [HIGH] CWE-502 CVE-2021-26915: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to exe NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in webrepdb StatusServlet.
nvd
CVE-2021-26912P2HIGHCVSS 8.1fixed in 11.73≥ 12.0, < 12.022021-02-08
CVE-2021-26912 [HIGH] CWE-502 CVE-2021-26912: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to exe NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in SupportRpcServlet.
nvd
CVE-2021-26913P2HIGHCVSS 8.1fixed in 11.73≥ 12.0, < 12.022021-02-08
CVE-2021-26913 [HIGH] CWE-502 CVE-2021-26913: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to exe NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in RpcServlet.
nvd
Netmotionsoftware Netmotion Mobility vulnerabilities | cvebase