Vulnerability Intelligence Report
CVE-2019-7214
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:83.32%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| smartertools | smartermail | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
83.317%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2019-01-29T00:00:00 |
| Published | 2019-04-24T00:00:00 |
| Patch Date | 2019-04-17 |
| Last Updated | 2024-08-04T20:46:44 |
Community Chatter & Buzz