CVE-2023-43208

Vulnerability ID

CVE-2023-43208

Severity

CRITICAL

Severity Score

9.8

Summary

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.

References

https://www.horizon3.ai/nextgen-mirth-connect-remote-code-execution-vulnerability-cve-2023-43208/

http://packetstormsecurity.com/files/176920/Mirth-Connect-4.4.0-Remote-Command-Execution.html

Mitigation and Patches

-

Exploits

https://github.com/K3ysTr0K3R/CVE-2023-43208-EXPLOIT

https://www.horizon3.ai/nextgen-mirth-connect-remote-code-execution-vulnerability-cve-2023-43208/

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mirth_connect_cve_2023_43208.rb

https://github.com/K3ysTr0K3R/CVE-2023-43208-EXPLOIT

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

http://packetstormsecurity.com/files/176920/Mirth-Connect-4.4.0-Remote-Command-Execution.html

Metasploit Payload

-

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-78

CVE-2023-43208

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2023-43208

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action