PT-2023-9236 · Nexgen · Nextgen Mirth Connect

Byr00T · CVE-2023-37679 · Published 2023-06-21 · Updated 2024-12-20

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NextGen Mirth Connect version 4.3.0

Description A remote command execution issue allows attackers to execute arbitrary commands on the hosting server. The vulnerability is related to the XStreamSerializer class and is due to a lack of data sanitization at the management level. This can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For NextGen Mirth Connect version 4.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-05267

CVE-2023-37679

Affected Products

Nextgen Mirth Connect

References · 25

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mirth_connect_cve_2023_43208.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37679.json · Exploit
• 🔥 https://ihteam.net/advisory/mirth-connect · Exploit
• https://osv.dev/vulnerability/CVE-2023-37679 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37679 · Security Note
• https://bdu.fstec.ru/vul/2024-05267 · Security Note
• https://twitter.com/Raj_Samani/status/1755215498558517588 · Twitter Post
• http://packetstormsecurity.com/files/176920/Mirth-Connect-4.4.0-Remote-Command-Execution.html · Note
• https://horizon3.ai/attack-research/attack-blogs/writeup-for-cve-2023-43208-nextgen-mirth-connect-pre-auth-rce · Note
• https://twitter.com/VulmonFeeds/status/1717616650063663313 · Twitter Post
• https://t.me/cvenotify/80916 · Telegram Post
• https://t.me/cibsecurity/72981 · Telegram Post
• https://t.me/cvenotify/69391 · Telegram Post
• https://t.me/cvenotify/69390 · Telegram Post
• https://meditecs.com/kb/mirth-connect-vulnerability-cve-2023-37679 · Note