Skip to content

CVE-2017-14702 ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.

CriticalCVSS 9.8 EPSS 8.3% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.

Affected products

ProductAffected versionsFixed in
branaghgroup ers data system = 1.8.1.0 No fix listed

References

  • github.com exploit third-party-advisory
  • 42952 exploit third-party-advisory vdb-entry