PT-2023-9236 · Nexgen · Nextgen Mirth Connect

Byr00T · Published 2023-06-21 · Updated 2024-12-20 · CVE-2023-37679

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NextGen Mirth Connect version 4.3.0

Description A remote command execution issue allows attackers to execute arbitrary commands on the hosting server. The vulnerability is related to the XStreamSerializer class and is due to a lack of data sanitization at the management level. This can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For NextGen Mirth Connect version 4.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-05267

CVE-2023-37679

Affected Products

Nextgen Mirth Connect

References · 24

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mirth_connect_cve_2023_43208.rb · Exploit
• 🔥 https://ihteam.net/advisory/mirth-connect · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-37679 · Security Note
• https://osv.dev/vulnerability/CVE-2023-37679 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05267 · Security Note
• https://t.me/cvenotify/69391 · Telegram Post
• https://vicarius.io/vsociety/posts/rce-in-mirth-connect-pt-i-cve-2023-37679 · Note
• https://twitter.com/VulmonFeeds/status/1717616650063663313 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1746943775622992207 · Twitter Post
• https://twitter.com/CVEnew/status/1717590573652042182 · Twitter Post
• https://t.me/cibsecurity/72981 · Telegram Post
• https://t.me/cvenotify/69390 · Telegram Post
• https://t.me/cvenotify/80916 · Telegram Post
• https://meditecs.com/kb/mirth-connect-vulnerability-cve-2023-37679 · Note
• http://mirth.com · Note