PT-2023-9236 · Nexgen · Nextgen Mirth Connect

Byr00T · Publicado 2023-06-21 · Atualizado 2024-12-20 · CVE-2023-37679

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NextGen Mirth Connect version 4.3.0

Description A remote command execution issue allows attackers to execute arbitrary commands on the hosting server. The vulnerability is related to the XStreamSerializer class and is due to a lack of data sanitization at the management level. This can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For NextGen Mirth Connect version 4.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2024-05267

CVE-2023-37679

Produtos afetados

Nextgen Mirth Connect

Referências · 24

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mirth_connect_cve_2023_43208.rb · Exploit
• 🔥 https://ihteam.net/advisory/mirth-connect · Exploit
• https://t.me/cvenotify/69391 · Publicação no Telegram
• https://vicarius.io/vsociety/posts/rce-in-mirth-connect-pt-i-cve-2023-37679 · Nota
• https://twitter.com/VulmonFeeds/status/1717616650063663313 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1746943775622992207 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1717590573652042182 · Publicação no Twitter
• https://t.me/cibsecurity/72981 · Publicação no Telegram
• https://t.me/cvenotify/69390 · Publicação no Telegram
• https://t.me/cvenotify/80916 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-37679 · Nota de Segurança
• https://meditecs.com/kb/mirth-connect-vulnerability-cve-2023-37679 · Nota
• http://mirth.com · Nota
• https://t.me/cvenotify/105175 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-37679 · Aviso do Fabricante