PRIVATE_FEEDS/CVE_VULN_FEED/CVE-2020-15505-mobilelron_mdm_rce/alert_text.md

Date: 2020-09-14

a critical RCE vuln has been published in Mobilenron MDM, CVE-2020-15505, with CVSS of 9.8 PoCs are available there is also more to this: CVE-2020-15506 - Authentication Bypass // CVE-2020-15507 - Arbitrary File Reading

Patches are available since 2020-06-15

we found various IPs in your ORG/ASN, matching criteria for possible vulnerable systems

please note: since we cannot identify the version correctly, you may be not affected nby the problem if you patched you system between june and now.

False-Positive-Level: possible

please find a list of affected IPs below and more information on that problem here:

References:

• https://zero.bs/security-incidents-logbook-en.html#2020-09-14
• https://nvd.nist.gov/vuln/detail/CVE-2020-15505