Cyber Resilience

CVE-2023-37679

CriticalPublic PoCRCE

Published: 03 August 2023

Published
03 August 2023
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.9344 99.8th percentile
Risk Priority 76 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-37679 is a critical-severity Command Injection (CWE-77) vulnerability in Nextgen Mirth Connect. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 0.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

Deeper analysis

CVE-2023-37679 is a remote command execution vulnerability in NextGen Mirth Connect version 4.3.0. The flaw is tracked under CWE-77 and received a CVSS 3.1 base score of 9.8, reflecting network-accessible attack vectors that require no authentication or user interaction.

Remote attackers can exploit the issue without credentials to execute arbitrary commands on the server hosting the application, resulting in full compromise of confidentiality, integrity, and availability.

Public references point to an ihteam.net advisory, a PacketStorm entry covering remote command execution against Mirth Connect 4.4.0, and vendor sites for NextGen and Mirth.

The CVE maintains a high EPSS score with a current value of 0.9344 and a recorded peak of 0.9377.

EU & UK References

Vulnerability details

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

nextgen
mirth connect
4.3.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References