exploit/windows/http/smartermail_rce

weaponized

SmarterTools SmarterMail less than build 6985 - .NET Deserialization Remote Code Execution

view exploit source metasploittype exploitpublished 2019-04-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-7214US	critical9.8	84.8% (100th)	Exploit	2019-04-24
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.