What is CVE-2019-6447?

CVE-2019-6447 is a high-severity vulnerability in Estrongs Es_file_explorer_file_manager, classified under Missing Authentication for Critical Function. CVSS score: 8.1/10. Published 2019-01-16.

How severe is CVE-2019-6447?

High severity. CVSS v3 base score is 8.1 out of 10.

Is CVE-2019-6447 known to be exploited?

71 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Estrongs Es_file_explorer_file_manager

CVE-2019-6447

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after th…

Vulnerability class: Broken Authentication

EPSS: 0.620 (99.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Estrongs Es_file_explorer_file_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-6447?: CVE-2019-6447 is a high-severity vulnerability in Estrongs Es_file_explorer_file_manager, classified under Missing Authentication for Critical Function. CVSS score: 8.1/10. Published 2019-01-16.
How severe is CVE-2019-6447?: High severity. CVSS v3 base score is 8.1 out of 10.
Is CVE-2019-6447 known to be exploited?: 71 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.