CVE Watch—

CVE-2023-43208

NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

CVSS

—

No CVSS

EPSS

82.7%

p100

KEV

YES

May 20, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

82.7%EPSS · 30 days82.7%

2026-06-302026-07-16

KEV catalog record

Product

NextGen Healthcare / Mirth Connect

Vulnerability

NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

Added to KEV

May 20, 2024

Remediate by

Jun 10, 2024

Known ransomware use

Yes

Summary description

NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://github.com/nextgenhealthcare/connect/wiki/4.4.1---What%27s-New ; https://nvd.nist.gov/vuln/detail/CVE-2023-43208

Related CVEs

No related CVEs by CWE or product.