Smartermail 6919 Exploit

. Attackers can send specially crafted serialized objects to these endpoints, which the server then executes. Technical Details & Testing

The criticality of this vulnerability is immense. Successful exploitation allowed any unauthenticated user from anywhere on the internet to execute commands on the server with the highest level of privilege—the account. This effectively gave the attacker full, undetectable control over the entire server, including the ability to install malware, exfiltrate all emails and user data, and use the server as a launching point to attack the rest of the internal network. The vulnerability was officially patched by SmarterTools in build 6985, which restricted the 17001 port to localhost access only. However, if an attacker already had a low-privileged foothold on a patched server, they could still potentially use this for local privilege escalation. smartermail 6919 exploit