Vulnerabilities > CVE-2020-23621 - Deserialization of Untrusted Data vulnerability in Squire-Technologies SVI MS Management System

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
squire-technologies
CWE-502
critical

Summary

The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object.

Vulnerable Configurations

Part Description Count
Application
Squire-Technologies
1

Common Weakness Enumeration (CWE)