Description
An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in conjunction with CVE-2018-12464 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that used GWAVA product name (i.e. GWAVA 6.5).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Micro Focus | Secure Messaging Gateway | unspecified – < 471 | 471 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
MicroFocus Secure Messaging Gateway Remote Code Execution
exploit/linux/http/microfocus_secure_messaging_gateway
Exploit-DB 1
- Micro Focus Secure Messaging Gateway (SMG) < 471 - Remote Code Execution (Metasploit) EDB-45083 · webapps · Jul 24, 2018
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.