VULNERABILITY INTELLIGENCE

CVE-2017-15692

CVSS score9.8 CRITICAL
EPSS probability4.78%
CISA KEVNot currently listed
Published2018-02-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.

Weakness classification

  • CWE-502: Deserialization of Untrusted Data

Primary references