CVE-2020-15505

nvd nist nuclei

Published: Jul 7, 2020Modified: Jun 17, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (13)

Products: Mobileiron: Core, Enterprise Connector, Monitor And Reporting Database, Sentry

4 products

Enterprise Connector

Monitor And Reporting Database

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Mobileiron Core	Before 10.3.0.4
Mobileiron Core	From 10.4.0.0 to 10.4.0.4
Mobileiron Core	From 10.5.1.0 to 10.5.1.1
Mobileiron Core	From 10.5.2.0 to 10.5.2.1
Mobileiron Core	From 10.6.0.0 to 10.6.0.1
Mobileiron Enterprise Connector	Before 10.3.0.4
Mobileiron Enterprise Connector	From 10.4.0.0 to 10.4.0.4
Mobileiron Enterprise Connector	From 10.5.1.0 to 10.5.1.1
Mobileiron Enterprise Connector	From 10.5.2.0 to 10.5.2.1
Mobileiron Enterprise Connector	From 10.6.0.0 to 10.6.0.1
Mobileiron Monitor And Reporting Database	Before 2.0.0.2
Mobileiron Sentry	From 9.7.0 to 9.7.3
Mobileiron Sentry	From 9.8.0 to 9.8.1

Related CWEs

Use of Incorrectly-Resolved Name or Reference

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

References (15)

http://packetstormsecurity.com/files/161097/MobileIron-MDM-Hessian-Based-Java-Deserialization-Remote-Code-Execution.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://cwe.mitre.org/data/definitions/41.html

Source: cve@mitre.org

Third Party Advisory

https://perchsecurity.com/perch-news/cve-spotlight-mobileiron-rce-cve-2020-15505/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: cve@mitre.org

Vendor Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: cve@mitre.org

Vendor Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: cve@mitre.org

Vendor Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: cve@mitre.org

Vendor Advisory

http://packetstormsecurity.com/files/161097/MobileIron-MDM-Hessian-Based-Java-Deserialization-Remote-Code-Execution.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://cwe.mitre.org/data/definitions/41.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://perchsecurity.com/perch-news/cve-spotlight-mobileiron-rce-cve-2020-15505/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.mobileiron.com/en/blog/mobileiron-security-updates-available

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-15505

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.