Critical RCE in NextGen Healthcare Mirth Connect (CVE-2023-43208) Enables Unauthenticated Remote Code Execution
What It Is – A deserialization of untrusted data flaw in NextGen Healthcare Mirth Connect allows an attacker to send a crafted request that triggers unauthenticated remote code execution.
Exploitability – Publicly disclosed; proof‑of‑concept code is available; CVSS v3.1 base score 9.8 (Critical).
Affected Products – NextGen Healthcare Mirth Connect (all versions prior to the vendor‑released patch).
Why It Matters for Trust & Control Assurance
- Vulnerability‑management control – Continuous scanning and timely patching are required to satisfy the control objective of “maintaining a defensible, up‑to‑date software inventory.”
- Audit‑ready evidence – Documented remediation (patch version, date, testing) provides the audit trail regulators and partners expect.
- Supply‑chain assurance – Third‑party integration platforms are a common attack surface; proving you monitor and remediate their flaws reinforces overall trust in your ecosystem.
Recommended Actions
- Apply the NextGen‑issued patch immediately and verify the running version.
- Run an organization‑wide scan for the vulnerable component across all environments.
- Record remediation steps in your control evidence repository (date, version, test results).
- Update your asset inventory and risk register to reflect the newly mitigated risk.
Source: CISA KEV – CVE‑2023‑43208