CVE-2019-6447 Missing authorization in n/a
Remote attackers on the local Wi-Fi network can read arbitrary files or execute applications via unauthenticated HTTP requests to an open TCP port.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6447?
CVE-2019-6447 is a high-severity missing authorization vulnerability in n/a, published on 16 Jan 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP.
Weakness: CWE-306
Which versions are affected by CVE-2019-6447?
It affects 1 product.
Products include Estrongs Es File Explorer File Manager.
How do I fix CVE-2019-6447?
No fix has been published for CVE-2019-6447 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2019-6447 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-6447 exists.
Public exploit code: 1 Metasploit module, 1 Exploit-DB entry and 13 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2pqf-jwpx-hmhw.