CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-12-13
Cleo Harmony, VLTrader, and LexiCom Unauthenticated Remote Code Execution (RCE) Vulnerability Advisory (CVE-2024-55956)
[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24
[Impact] Unauthenticated remote attackers can leverage default settings of the Autorun directory to import and execute arbitrary Bash or PowerShell commands on the host system, leading to full system compromise.
[Mitigation] Immediately upgrade to the patched version (5.8.0.24 or higher) and restrict access to exposed management interfaces.