CVE-2021-26914

NetMotion Mobility vulnerable to unauthenticated remote code execution via Java deserialization in MvcUtil.valueStringToObject. Affected products: NetMotion Mobility Server (11.x before 11.73 and 12.x before 12.02). Exploitation path is via the server’s Java deserialization in the MvcUtil class, ...

CVE-2021-26913

NetMotion Mobility is affected: before version 11.73 and 12.x before 12.02, an unauthenticated attacker could trigger Java deserialization in RpcServlet to execute arbitrary code with SYSTEM privileges. The vulnerability is due to unsafe deserialization of untrusted data in RpcServlet. Affected p...

CVE-2021-26912

CVE-2021-26912 affects NetMotion Mobility Server via Java deserialization in SupportRpcServlet, enabling unauthenticated remote code execution as SYSTEM. Affected versions are NetMotion Mobility before 11.73 and 12.x before 12.02. Multiple sources corroborate the issue; vendor advisories mention ...

CVE-2021-26915

CVE-2021-26915 affects NetMotion Mobility Server products where a Java deserialization flaw in the webrepdb StatusServlet allows remote, unauthenticated code execution as SYSTEM. Affected: NetMotion Mobility before 11.73 and 12.x before 12.02. Exploitation details are described in multiple source...