exploit/multi/http/mirth_connect_cve_2023_43208

weaponized

Mirth Connect Deserialization RCE

view exploit source metasploittype exploitpublished 2023-10-25catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-43208US	critical9.8OT critical	85.4% (100th)	KEV	2023-10-26
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-…
CVE-2023-37679US	critical9.8	99.4% (100th)	Exploit	2023-08-03
A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.