CVE-2017-10932 - CVE House
Back to Database
Status published Critical CVE-2017-10932

All versions prior to V12.17.20 of the ZTE Microwave NR8000...

Vulnerability Description

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-10932

Credits & Attribution

No credits recorded in the NVD database.

References

More from ZTE

View All →
CVE-2025-66315
ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability
Medium 4.3
CVE-2025-66314
Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on...
High 7.5
CVE-2025-46583
DOS Vulnerability in ZTE MC889A Pro product
Medium 5.3
CVE-2025-46582
Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product
High 7.7
CVE-2025-46581
ZTE ZXCDN product has a Struts RCE Vulnerability
Critical 9.8

Affected Vendor

Affected Software

NR8000 Series
Vulnerable Versions:
All versions prior to V12.17.20

Timeline

Official Publish: September 27th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.