CVE-2023-37679

EPSS 97.1%

Vexday Risk Score

40Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 97.1%KEV nãoPoC —Nuclei simMetasploit simPatch —

Lifecycle

03 Aug 2023Published on NVD

25 Oct 2023Metasploit module available

Recommendation: Plan a near-term fix — a public PoC already exists.

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.

Affected products

Want to know if your infrastructure is exposed to this?

References