CVE-2019-7214
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 85%
da publicação à arma595 dias
Publicada no NVD24 de abr.
1ª PoC+595d
metasploit17 de abr.
probabilidade de exploração
85%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
7 exploit(s) público(s)
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 7
exploitdbwww.exploit-db.com/exploits/49216não verificadogithubgithub.com/Drew-Alleman/CVE-2019-7214★ 4githubgithub.com/devzspy/CVE-2019-7214★ 2githubgithub.com/andyfeili/-CVE-2019-7214★ 1githubgithub.com/ElusiveHacker/CVE-2019-7214★ 0cve_referencepacketstormsecurity.com/files/160416/SmarterMail-6985-Remote-Code-Execution.htmlnão verificadocve_referencepacketstormsecurity.com/files/173388/SmarterTools-SmarterMail-Remote-Code-Execution.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/160416/SmarterMail-6985-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/173388/SmarterTools-SmarterMail-Remote-Code-Execution.htmlhttps://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/https://www.smartertools.com/smartermail/release-notes/current