Cyber Resilience

CVE-2020-15505

Mobileiron Core ≤ 10.3.0.4

CISA KEVActive ExploitationEUVD ExploitedPublic PoC
Published
07 July 2020
Modified
07 November 2025
KEV Added
03 November 2021
Patch / advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.99 100.0th percentile
Risk Priority 97 floored blend · peak EPSS

Summary

CVE-2020-15505 is a critical-severity Use of Incorrectly-Resolved Name or Reference (CWE-706) vulnerability in Mobileiron Core. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Path Interception (T1034); ranked in the top 0.0% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2020-15505 is a remote code execution vulnerability affecting MobileIron Core and Connector versions 10.3.0.3 and earlier along with multiple 10.4.x, 10.5.x, and 10.6.0.0 releases; Sentry versions 9.7.2 and earlier plus 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier. The flaw carries a CVSS score of 9.8 and is associated with CWE-706, enabling remote attackers to execute arbitrary code through unspecified vectors that reference materials indicate involve Hessian-based Java deserialization.

Unauthenticated attackers with network access can exploit the issue without user interaction to achieve full remote code execution on affected MobileIron components, potentially compromising device management, authentication, and reporting functions in enterprise mobile deployments.

MobileIron advisory information states that security updates are available to address the vulnerability in the listed products. Public references also include exploit code demonstrating the deserialization path, indicating active researcher interest shortly after disclosure.

EU & UK References

Vulnerability Data

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier…

more

that allows remote attackers to execute arbitrary code via unspecified vectors.

CWE(s)
KEV Date Added
03 November 2021

Related Threats

MITRE ATT&CK Enterprise Techniques

T1034 Path Interception Persistence
**This technique has been deprecated.
T1574.008 Path Interception by Search Order Hijacking Stealth
Adversaries may execute their own malicious payloads by hijacking the search order used to load other programs.
T1036 Masquerading Stealth
Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2021-40539Shared CWE-706both on KEV
CVE-2020-3153Same product class: VPN / SSL gatewayboth on KEV
CVE-2020-3433Same product class: VPN / SSL gatewayboth on KEV
CVE-2020-12812Same product class: VPN / SSL gatewayboth on KEV
CVE-2024-21887Same product class: VPN / SSL gatewayboth on KEV
CVE-2023-38035Same product class: VPN / SSL gatewayboth on KEV
CVE-2024-21893Same product class: VPN / SSL gatewayboth on KEV
CVE-2025-0282Same product class: VPN / SSL gatewayboth on KEV
CVE-2024-3400Same product class: VPN / SSL gatewayboth on KEV
CVE-2019-11510Same product class: VPN / SSL gatewayboth on KEV

Affected Assets

mobileiron
core
≤ 10.3.0.4 · 10.4.0.0 — 10.4.0.4 · 10.5.1.0 — 10.5.1.1
mobileiron
enterprise connector
≤ 10.3.0.4 · 10.4.0.0 — 10.4.0.4 · 10.5.1.0 — 10.5.1.1
mobileiron
monitor and reporting database
≤ 2.0.0.2
mobileiron
sentry
9.7.0 — 9.7.3 · 9.8.0 — 9.8.1

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure-development practices directly prevent incorrect name/reference resolution bugs during coding.

PR.AA-05 partial match
prevents

Enforced authorization boundaries limit damage from an incorrectly resolved reference.

PR.IR-01 partial match
prevents

Logical segmentation and access controls reduce the chance an out-of-sphere resolution succeeds.

PR.PS-01 partial match
prevents

Hardened configuration baselines can constrain allowable name-to-resource mappings.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

finds

Security testing can detect incorrect name or reference resolution through fuzzing and negative test cases.

degrades

Network segmentation and routing policies reduce the chance that a mis-resolved name leads to an unintended external resource.

degrades

Segregated networks limit the blast radius when a name or reference resolves outside the intended control sphere.

prevents

Secure SDLC practices include design reviews that can catch incorrect name or reference handling before deployment.

prevents

Application security requirements can mandate validation of all external references and names used at runtime.

prevents

Secure architecture principles discourage reliance on ambient or globally-resolvable names without explicit scoping.

References