CVE-2019-6447 : Vulnerability Insights and Analysis

ES File Explorer File Manager app, version 4.1.9.7.4 for Android, has a vulnerability that allows remote attackers to access files and run applications through TCP port 59777 on the local Wi-Fi network.

Understanding CVE-2019-6447

This CVE entry describes a security vulnerability in the ES File Explorer File Manager app for Android.

What is CVE-2019-6447?

The ES File Explorer File Manager app, version 4.1.9.7.4, for Android, has a vulnerability that enables remote attackers to access any files or run applications through TCP port 59777 on the local Wi-Fi network. This TCP port stays open even after launching the ES app and accepts unauthenticated application/json data over the HTTP protocol.

The Impact of CVE-2019-6447

Remote attackers can read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network.
The TCP port remains open after the ES application has been launched once and responds to unauthenticated application/json data over HTTP.

Technical Details of CVE-2019-6447

This section provides more technical details about the vulnerability.

Vulnerability Description

The ES File Explorer File Manager application through version 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. The TCP port remains open after the ES application has been launched once and responds to unauthenticated application/json data over HTTP.

Affected Systems and Versions

Product: ES File Explorer File Manager app
Vendor: N/A
Version: 4.1.9.7.4

Exploitation Mechanism

Attackers can exploit this vulnerability by sending requests to TCP port 59777 on the local Wi-Fi network, allowing them to access files and run applications without authentication.

Mitigation and Prevention

Protecting systems from this vulnerability is crucial to maintaining security.

Immediate Steps to Take

Disable ES File Explorer File Manager app or restrict its network access.
Monitor network traffic for any suspicious activity on TCP port 59777.

Long-Term Security Practices

Regularly update the ES File Explorer app to the latest version.
Use alternative file management apps with better security practices.

Patching and Updates

Check for security patches and updates from the ES File Explorer app vendor to address this vulnerability.