critical9.8Public exploit code
CVE-2017-14702
ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ERS Data System 1.8.1 - Java Deserialization2017-09-21 · remote · windows
Impact
ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Branaghgroup | Ers Data System | Version 1.8.1.0 |