CVE-2019-7214
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 85%
da publicação à arma595 dias
Publicada no NVD24 de abr.
1ª PoC+595d
metasploit17 de abr.
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 7
exploitdbwww.exploit-db.com/exploits/49216não verificadogithubgithub.com/Drew-Alleman/CVE-2019-7214★ 4githubgithub.com/devzspy/CVE-2019-7214★ 2githubgithub.com/andyfeili/-CVE-2019-7214★ 1githubgithub.com/ElusiveHacker/CVE-2019-7214★ 0cve_referencepacketstormsecurity.com/files/160416/SmarterMail-6985-Remote-Code-Execution.htmlnão verificadocve_referencepacketstormsecurity.com/files/173388/SmarterTools-SmarterMail-Remote-Code-Execution.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/160416/SmarterMail-6985-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/173388/SmarterTools-SmarterMail-Remote-Code-Execution.htmlhttps://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/https://www.smartertools.com/smartermail/release-notes/current