Thorn SFTP gateway 3.4.x prior to 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pivotal, a related issue to CVE-2016-1000027. Also, within the specific context of Thorn SFTP gateway, this leads to remote code execution.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
thorntech sftp_gateway_firmware |