Vulnerabilitycritical

Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data

The Hacker Newsby @TheHackersNewsOct 27, 2023 · 03:29 UTC (Oct 27, 2023)1 min read1

Read at thehackernews.com

Analyze CVE-2023-43208 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-43208 CVE-2023-37679

Tags: cve-2023-43208 cve-2023-37679 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-37679	A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server	9.8	99%	PoC	Aug 3, 2023
CVE-2023-43208	Unauthenticated Deserialization RCE in NextGen Healthcare Mirth Connect	9.8	85%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV May 20, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Oct 26, 2023 Vulnerability / Network Security Users of Mirth Connect , an open-source data integration platform from NextGen HealthCare, are being urged to update to the latest version following the discovery of an unauthenticated remote code execution vulnerability. Tracked as CVE-2023-43208 , the vulnerability has been addressed in version 4. 4.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.