CVE-2017-15692

CVE-2017-15692 describes a critical deserialization vulnerability in Apache Geode versions prior to 1.4.0. An unprivileged attacker with network access to the Geode locator's TcpServer port could achieve remote code execution by exploiting the deserialization of untrusted data, provided specific classes are present on the classpath. This vulnerability carries a CVSS v3.0 score of 9.8 (Critical) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.