Netmotionsoftware

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Netmotionsoftware records in CISA KEV

No Netmotionsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Netmotion Mobility 4 records HIGH Mobility 2 records LOW

Records

4 records in Netmotion Mobility · all components

TI-2021-08520 CVE-2021-26914 · GHSA-gm82-r7hx-vc9c

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote…

HIGH 75

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.77673 Published 2021-02-08 No fix listed CWE-502

TI-2021-08521 CVE-2021-26915 · GHSA-hprp-8mpx-26q9

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote…

MEDIUM 64

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in webrepdb StatusServlet.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.43231 Published 2021-02-08 No fix listed CWE-502

TI-2021-08518 CVE-2021-26912 · GHSA-34v3-f2p3-76vj

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote…

MEDIUM 64

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in SupportRpcServlet.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.42421 Published 2021-02-08 No fix listed CWE-502

TI-2021-08519 CVE-2021-26913 · GHSA-x69r-8f37-6mwc

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote…

MEDIUM 50

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in RpcServlet.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.13829 Published 2021-02-08 No fix listed CWE-502

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0