CVE-2019-7214 PoC — SmarterTools SmarterMail 代码问题漏洞

Source

https://github.com/devzspy/CVE-2019-7214

Associated Vulnerability

Title:SmarterTools SmarterMail 代码问题漏洞 (CVE-2019-7214)
Description:SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.

Description

Collection of PoCs created for SmarterMail < Build 6985 RCE

Readme

# CVE-2019-7214

Remote Code Execution in .NET deserialization for the SmarterMail system.

## Collection

Please find a collection of proof of concepts for the exploit in this repository. Some may work as intended without modification and some may require modification.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!