CVE-2023-37679
Published: 03 August 2023
Summary
CVE-2023-37679 is a critical-severity Command Injection (CWE-77) vulnerability in Nextgen Mirth Connect. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 0.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2023-37679 is a remote command execution vulnerability in NextGen Mirth Connect version 4.3.0. The flaw is tracked under CWE-77 and received a CVSS 3.1 base score of 9.8, reflecting network-accessible attack vectors that require no authentication or user interaction.
Remote attackers can exploit the issue without credentials to execute arbitrary commands on the server hosting the application, resulting in full compromise of confidentiality, integrity, and availability.
Public references point to an ihteam.net advisory, a PacketStorm entry covering remote command execution against Mirth Connect 4.4.0, and vendor sites for NextGen and Mirth.
The CVE maintains a high EPSS score with a current value of 0.9344 and a recorded peak of 0.9377.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-41557
Vulnerability details
A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.