CVE-2019-6447
CVE-2019-6447
Vexday Risk Score
58Atenção
Decisão SSVC (CISA)
Attend
PoC disponível → acompanhar de perto
Maturidade do exploit
Arma pronta
PoC popular no GitHub (679 estrelas) — código de exploração amplamente disponível.
CVSS —EPSS 62.0%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Ciclo de vida
09 jan 2019PoC pública
16 jan 2019Exploit Metasploit disponível
16 jan 2019Publicada no NVD
Recomendação: Planejar correção próxima — já existe PoC pública.
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 14
githubgithub.com/fs0c131y/ESFileExplorerOpenPortVuln★ 679githubgithub.com/Chethine/EsFileExplorer-CVE-2019-6447★ 3githubgithub.com/h3x0v3rl0rd/CVE-2019-6447★ 0githubgithub.com/julio-cfa/POC-ES-File-Explorer-CVE-2019-6447★ 0githubgithub.com/febinrev/CVE-2019-6447-ESfile-explorer-exploit★ 0githubgithub.com/Kayky-cmd/CVE-2019-6447--.★ 0githubgithub.com/VinuKalana/CVE-2019-6447-Android-Vulnerability-in-ES-File-Explorer★ 0githubgithub.com/Osuni-99/CVE-2019-6447★ 0githubgithub.com/vino-theva/CVE-2019-6447★ 0githubgithub.com/Cmadhushanka/CVE-2019-6447-Exploitation★ 0githubgithub.com/KaviDk/CVE-2019-6447-in-Mobile-Application★ 0githubgithub.com/SandaRuFdo/ES-File-Explorer-Open-Port-Vulnerability---CVE-2019-6447★ 0exploitdbwww.exploit-db.com/exploits/50070não verificadocve_referencepacketstormsecurity.com/files/163303/ES-File-Explorer-4.1.9.7.4-Arbitrary-File-Read.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.