CVE-2017-9844

CVE-2017-9844 is a deserialization vulnerability affecting SAP NetWeaver 7400.12.21.30308, specifically within the Visual Composer's devserver package. A remote attacker can exploit this by sending a crafted serialized Java object to the metadatauploader, leading to denial of service or potentially arbitrary code execution. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network without authentication, primarily impacting availability. While there's no public exploit code (Metasploit, Nuclei, ExploitDB), media coverage suggests potential exploitation, and it has garnered significant community discussion.