NextGen Healthcare Mirth Connect Under Attack – CISA Issues Urgent Warning

The U.S. Cybersecurity and Infrastructure Security Company (CISA) on Monday extra a security flaw impacting NextGen Healthcare Mirth Join to its Recognized Exploited Vulnerabilities (KEV) catalog, citing evidence of lively exploitation.

The flaw, tracked as CVE-2023-43208 (CVSS score: N/A), issues a circumstance of unauthenticated remote code execution arising from an incomplete patch for a further critical flaw CVE-2023-37679 (CVSS score: 9.8).

Information of the vulnerability were initially disclosed by Horizon3.ai in late Oct 2023, with supplemental complex details and a evidence-of-idea (PoC) exploit introduced earlier this January.

Mirth Connect is an open up-resource info integration platform greatly used by health care firms, permitting for details trade concerning distinct units in a standardized fashion.

CVE-2023-43208 is “finally relevant to insecure utilization of the Java XStream library for unmarshalling XML payloads,” security researcher Naveen Sunkavally said, describing the flaw as conveniently exploitable.

CISA has not presented any information about the nature of assaults exploiting the flaw, and it is unclear who weaponized them or when the in-the-wild exploitation was recorded.

Also included to the KEV catalog is a recently disclosed form of confusion bug impacting the Google Chrome browser (CVE-2024-4947) that the tech big has acknowledged as exploited in real-entire world attacks.

Federal businesses are demanded to update to a patched edition of the software – Mirth Link version 4.4.1 or afterwards and Chrome model 125..6422.60/.61 for Windows, macOS, and Linux – by June 10, 2024, to protected their networks towards energetic threats.

Located this article intriguing? Comply with us on Twitter  and LinkedIn to examine a lot more special material we publish.

Some parts of this article are sourced from:
thehackernews.com