Outbreak Alert: Apache RocketMQ Remote Command Execution Vulnerability

FortiRecon provides outside-in coverage for risks toward customers.  

External Attack Surface Management helps customers to identify exposure to known and unknown enterprise assets and associated vulnerabilities across the enterprise.  

The Vulnerability Intelligence Module under Adversary Centric Intelligence (ACI) provides a realistic view of the impact of the vulnerability based upon chatter and discussion of the same across various external sources such as Darkweb, social media, News / Blogs etc.  

CVE ID  

CVE-2023-33246 

CVE Title  

 Apache RocketMQ Command Execution 

CVE Severity  

 High 

ACI Coverage  

• 52 articles referencing this CVE on the security blog.  
• 1 article referencing possibly working exploit(s) for this vulnerability. 
• 10 public code repositories containing possible POC exploits for this vulnerability 
• 85 mentions on social media for this vulnerability.  
• Discussion on 1 Telegram channel. 

EASM Scanner  

No