CVE-2019-7214: Critical severity smartertools smartermail enterprise vulnerability
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-7214?
CVE-2019-7214 is a vulnerability in SmarterTools SmarterMail 16.x before build 6985 that allows deserialization of untrusted data, which can lead to remote code execution.
How severe is CVE-2019-7214?
CVE-2019-7214 has a severity score of 9.8, which is considered critical.
What is the affected software version of CVE-2019-7214?
CVE-2019-7214 affects SmarterTools SmarterMail versions between 16.0.6345 and 16.3.6985.
How can an attacker exploit CVE-2019-7214?
An unauthenticated attacker can exploit CVE-2019-7214 by running commands on the server when port 17001 is remotely accessible.
How can CVE-2019-7214 be mitigated?
To mitigate CVE-2019-7214, apply the Build 6985 patch, which makes port 17001 not accessible remotely by default.