Published: 30/09/2017 Updated: 29/07/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

ERS Data System 1.8.1.0 allows remote malicious users to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.

Vulnerable Product	Search on Vulmon	Subscribe to Product
branaghgroup ers data system 1.8.1.0

# Exploit Title: ERS Data System 181 Deserialize Vulnerability # Google Dork: N/A # Date: 9/21/2017 # Exploit Author: West Shepherd # Vendor Homepage: wwwersdatacom # Software Link: wwwersdatacom/downloads/ErsSetupexe # Version: 1810 # Tested on: Windows 7 x86 # CVE : CVE-2017-14702 # Description: # ERS Data System 1810 allows ...

ERS Data System version 181 suffers from a java deserialization vulnerability ...

CWE-502 https://github.com/wshepherd0010/advisories/blob/master/CVE-2017-14702.md https://www.exploit-db.com/exploits/42952/https://nvd.nist.gov https://www.exploit-db.com/exploits/42952/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-14702

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect