Cleo MFT Vulnerability CVE-2024
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-50623 | Unauthenticated RCE via Unrestricted File Upload in Cleo Harmony, VLTrader, LexiCom | 9.8 | 99% | KEVRansomware | KEV |
| CVE-2024-55956 | Unauthenticated File Upload RCE in Cleo Harmony, VLTrader, and LexiCom | 9.8 | 94% | KEVRansomwarePoC | KEV |
From the original article
2 min read at recordedfuture.com
CVE-2024-50623 is a critical unrestricted file upload and download vulnerability that could lead to remote code execution (RCE). The vulnerability affects Cleo's managed file transfer (MFT) products Harmony, VLTrader, and LexiCom before version 5. 8.
By Sam Langrock · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.