Cleo Multiple Products Unauthenticated File Upload Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 17/12/2024. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| harmony | < 5.8.0.24 | 5.8.0.24 |
| lexicom | < 5.8.0.24 | 5.8.0.24 |
| vltrader | < 5.8.0.24 | 5.8.0.24 |
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free