Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 29/05/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| javs viewer | = 8.3.7.250 |
Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free