Zero Day in Cleo File Transfer Software Exploited En Masse
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-50623 | Unauthenticated RCE via Unrestricted File Upload in Cleo Harmony, VLTrader, LexiCom | 9.8 | 99% | KEVRansomware | KEV |
From the original article
2 min read at infosecurity-magazine.com
Security researchers have warned customers of the popular file transfer software vendor Cleo that a zero-day vulnerability is currently being exploited in the wild to steal their data. Security vendor Huntress was the first to publicize the attacks on Monday, claiming that the remote code execution (RCE) bug CVE-2024-50623 affects the Cleo Harmony, VLTrader and LexiCom products.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.