Ctrl + K
/ news / CVE
CVE•Published 2023-10-27•2 articles on news•7 live references•NVD data

CVE-2023-46604

Vulnerability data via CVEDB (Shodan)

CISA KEVKnown exploited in the wild.Used in ransomware
CISA action: Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.
CVSS v3.1
10.0
CRITICAL
EPSS percentile
100
Exploit Prediction Scoring System · top 0% of all CVEs
Description

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.

Timeline
Published 2023-10-27

External references

NVDMITREExploit-DBGitHub PoCSploitustrickest/cveVulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag13 hosts
vuln:CVE-2023-46604
Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · product
product:"Apache Activemq"
All exposed Apache Activemq instances — cross-reference with the CVE's affected-version range.
Shodan · banner/body mention
http.html:"Activemq"
HTTP body or banner mentions "Activemq" — catches deploys Shodan didn't identify as a product.
More intel sources (5)
Shodan report
vuln:CVE-2023-46604
Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2023-46604
Censys host search filtered to this CVE id.
grep.app
CVE-2023-46604
Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2023-46604
GitHub code search for direct mentions.
Google dork
"CVE-2023-46604" exploit -site:nvd.nist.gov
Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2023-466048 repos
Mr-xn/Penetration_Testing_POCHTML
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypas…
★ 7,400·updated 2d ago
k8gege/LadonC#
Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\S…
★ 5,299·updated 1y ago
Threekiii/Awesome-POCJava
一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
★ 5,047·updated 1mo ago
taielab/awesome-hacking-listsunknown
A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!
★ 1,355·updated 6mo ago
Ostorlab/KEVunknown
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
★ 612·updated 3mo ago
Awrrays/FrameVulunknown
POC集合，框架nday漏洞利用
★ 454·updated 1y ago
vulncheck-oss/go-exploitGo
A Go-based Exploit Framework
★ 440·updated 3d ago
1diot9/MyJavaSecStudyJava
在Java安全学习过程中的笔记和代码
★ 112·updated 1mo ago
Articles on news mentioning CVE-2023-46604