VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 28, 2017· Updated Jun 17, 2026

CVE-2017-10932

CVE-2017-10932

Description

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Zte/Nr8000tr Firmware
    cpe:2.3:o:zte:nr8000tr_firmware:*:*:*:*:*:*:*:*
    Range: <12.17.20
  • Zte/Nr8120a Firmware2 versions
    cpe:2.3:o:zte:nr8120a_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zte:nr8120a_firmware:*:*:*:*:*:*:*:*range: <12.17.20
    • cpe:2.3:o:zte:nr8120_firmware:*:*:*:*:*:*:*:*range: <12.17.20
  • Zte/Nr8150 Firmware
    cpe:2.3:o:zte:nr8150_firmware:*:*:*:*:*:*:*:*
    Range: <12.17.20
  • Zte/Nr8950 Firmware2 versions
    cpe:2.3:o:zte:nr8250_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zte:nr8250_firmware:*:*:*:*:*:*:*:*range: <12.17.20
    • cpe:2.3:o:zte:nr8950_firmware:*:*:*:*:*:*:*:*range: <12.17.20
  • Zte/NR8000 seriesllm-create
    Range: <V12.17.20
  • Zte/NR8120llm-create
    Range: <V12.17.20
  • Zte/NR8120Allm-create
    Range: <V12.17.20
  • Zte/Microwave NR8000 seriescpe-rescue
    Range: All versions prior to V12.17.20

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.