Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-06-10. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
HackTheBox - Interpreter 💥 RCE en Mirth Connect (CVE-2023-43208) 🐍 Abuso de eval() para root https://sckull.github.io/posts/interpreter/
Post summary
The post announces a CVE‑2023‑43208 RCE in Mirth Connect, describes exploiting eval() for root access, and references a link that presumably contains a proof‑of‑concept.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nextgen | mirth_connect | - | - | - |