CVE-2018-12465

CRITICAL

Micro Focus SMG <471 - Command Injection

Title source: llm

Description

An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in conjunction with CVE-2018-12464 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that used GWAVA product name (i.e. GWAVA 6.5).

Exploits (2)

exploitdb WORKING POC

by Mehmet Ince · rubywebappsphp

https://www.exploit-db.com/exploits/45083

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by Mehmet Ince <[email protected]> · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/microfocus_secure_messaging_gateway.rb

View Code ZIP pw:eip

References (3)

[Various Sources] https://pentest.blog/unexpected-journey-6-all-ways-lead-to-rome-remote-code-execution-on-microfocus-secure-messaging-gateway/

[Various Sources] https://support.microfocus.com/kb/doc.php?id=7023133

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/45083/

Scores

CVSS v3 9.1

EPSS 0.8223

EPSS Percentile 99.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-78 CWE-77

Status published

Products (1)

microfocus/secure_messaging_gateway < 471

Published Jun 29, 2018

Tracked Since Feb 18, 2026