CVE-2019-7214

PoC —

CVSS 3.0

9.8 critical

EPSS

85%p100

Published

Apr 24, 2019 (Apr 24, 2019)

Modified

Jun 17, 2026

Description

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.

Vendors: smartertools
Products: smartermail
Weakness: CWE-502
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (84.8%)

In the news0 stories

No ingested article mentions this CVE yet.