Critical severity · published Jun 11, 2018
CVE-2017-3207
The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3…
9.8
CVSS
8.1%
EPSS
No
On KEV
Description
The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)8.1% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Weborb For Java · Themidnightcoders
5.1.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-3207
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-3207
Third Party Advisory
http://www.securityfocus.com/bid/97384
Third Party Advisory
http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution
Exploit
https://codewhitesec.blogspot.com/2017/04/amf.html
Third Party Advisory
https://www.kb.cert.org/vuls/id/307983
More from Weborb For Java
9.8
CVE-2017-3208
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded…