Micro.Focus.Secure.Messaging.Gateway.Remote.Code.Execution

Description

This indicates an attack attempt to exploit a Remote Code Execution Vulnerability in Micro Focus Secure Messaging Gateway.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted HTTP request. An attacker can exploit this to overwrite and execute arbitrary code on the affected machine via a crafted HTTP request.

Affected Products

Micro Focus Secure Messaging Gateway version 470 and prior

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://support.microfocus.com/kb/doc.php?id=7023132
https://support.microfocus.com/kb/doc.php?id=7023133

References