CVE-2021-26914

Publication date

2021-02-08 21:04:19

Family

mitre

State

PUBLISHED

Description

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.