CVE-2015-6420 PoC — 多款Cisco产品Apache Commons Collections库任意代码执行漏洞

Source

https://github.com/Leeziao/CVE-2015-6420

Associated Vulnerability

Title: 多款Cisco产品Apache Commons Collections库任意代码执行漏洞 (CVE-2015-6420)
Description:Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Readme

# CVE-2015-6420

![漏洞触发路径](CVE-2015-6420.png)

- 反序列化漏洞

## 参考

-  [Java反序列化漏洞-CC 利用链分析](https://blog.csdn.net/weixin_49125123/article/details/135040071)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →