CVE-2023-43208

CriticalActively exploited (CISA KEV)Known to be used in ransomware campaigns

Description

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.

SeverityCritical

CVSS9.8

Exploit probability—

ProductNextGen Healthcare Mirth Connect

PublishedOct 26, 2023

First seenOct 26, 2023

Added to KEVMay 20, 2024

Weakness typeCWE-78OS command injection CWE-502Deserialization of untrusted data

How to fix

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date: Jun 10, 2024

Update

nextgen mirth_connect4.4.1 or later

Affected products

Product	Affected versions	Fixed in
nextgen mirth_connect	v < 4.4.1	4.4.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.