CVE-2017-10932: Critical severity zte nr8120 vulnerability
All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10932?
CVE-2017-10932 is classified with a high severity due to its potential for remote code execution.
How do I fix CVE-2017-10932?
To fix CVE-2017-10932, update the ZTE Microwave NR8000 series products to version V12.17.20 or later.
What products are affected by CVE-2017-10932?
CVE-2017-10932 affects all versions before V12.17.20 of the ZTE Microwave NR8000 series products.
Is there a workaround for CVE-2017-10932?
There is no known workaround for CVE-2017-10932 other than upgrading to a fixed version.
When was CVE-2017-10932 reported?
CVE-2017-10932 was reported in 2017 and has been documented in various security advisories.