CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload
Attackers can upload malicious files to Cleo Harmony, VLTrader, or LexiCom servers to achieve remote code execution.
- Exploited in the wild
- Since 13 Dec 2024
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-50623?
CVE-2024-50623 is a critical vulnerability in n/a, published on 27 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
Weakness: CWE-434
Which versions are affected by CVE-2024-50623?
It affects 3 products.
Products include Cleo Harmony, Cleo Lexicom, Cleo Vltrader.
How do I fix CVE-2024-50623?
No fix has been published for CVE-2024-50623 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 3 Jan 2025.
Is CVE-2024-50623 being exploited?
Yes. Attackers have exploited CVE-2024-50623 in the wild since at least 13 Dec 2024, including in ransomware campaigns.
Public exploit code: 1 Nuclei template and 4 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8j74-v9cr-x39h.