CVE-2019-6447

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 63.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-01-16 · updated 2026-06-17
Weakness: CWE-306

Description

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP.

Affected products

Estrongs Es File Explorer File Manager: through 4.1.9.7.4

References

http://packetstormsecurity.com/files/163303/ES-File-Explorer-4.1.9.7.4-Arbitrary-File-Read.html
https://github.com/fs0c131y/ESFileExplorerOpenPortVuln
https://twitter.com/fs0c131y/status/1085460755313508352
http://packetstormsecurity.com/files/163303/ES-File-Explorer-4.1.9.7.4-Arbitrary-File-Read.html
https://github.com/fs0c131y/ESFileExplorerOpenPortVuln
https://twitter.com/fs0c131y/status/1085460755313508352

Get alerted when CVE-2019-6447 or the next vulnerability affects your stack