CVE-2019-7214

NONE EPSS 99.6%

Published Apr 24, 20197y ago · Modified Jun 17, 20262w ago

Published Apr 24, 2019 7y ago

Last Modified Jun 17, 2026 2w ago

Description

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.

Threat Intelligence

EPSS Exploit Probability

99.6% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-502 Deserialization of Untrusted Data Validation

Affected Products 1

Vendor	Product	Version	Range
smartertools	smartermail	*	≥16.0.6345 – <16.3.6985

References 4

packetstormsecurity.com http://packetstormsecurity.com/files/160416/SmarterMail-6985-Remote-Code-Execution.html
packetstormsecurity.com http://packetstormsecurity.com/files/173388/SmarterTools-SmarterMail-Remote-Code-Execution.html
nccgroup.trust https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/

Third Party Advisory
smartertools.com https://www.smartertools.com/smartermail/release-notes/current

ExploitRelease NotesVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.