CVE-2019-7214

Published Apr 24, 2019·Updated Jun 16, 2026

NVD Description

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.

Public Exploits & PoCs3 found

PoC: CVE-2019-7214

For CTF use only (the CVE-2019-7214 also resolves the host from /etc/hosts)

PoC: CVE-2019-7214

Python3 Rewrite of SmarterMail < Build 6985 Remote Code Execution found by 1F98D (CVE-2019-7214)

PoC: CVE-2019-7214

Collection of PoCs created for SmarterMail < Build 6985 RCE

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free