CVE-2024-50623

Description

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

References

https://www.securityweek.com/western-alliance-bank-discloses-data-breach-linked-to-cleo-hack/

https://hackread.com/ransomware-attacks-hit-record-high-in-february-2025/

https://www.theregister.com/2025/02/28/cisa_kev_list_ransomware/

https://www.securityweek.com/cve-assigned-to-cleo-vulnerability-as-cl0p-ransomware-group-takes-credit-for-exploitation/

https://www.bleepingcomputer.com/news/security/clop-ransomware-claims-responsibility-for-cleo-data-theft-attacks/

https://www.theregister.com/2024/12/10/cleo_vulnerability/

https://www.securityweek.com/cleo-file-transfer-tool-vulnerability-exploited-in-wild-against-enterprises/

https://www.darkreading.com/cyberattacks-data-breaches/termite-ransomware-behind-cleo-zero-day-attacks

https://www.bleepingcomputer.com/news/security/new-cleo-zero-day-rce-flaw-exploited-in-data-theft-attacks/

https://therecord.media/multiple-cleo-file-transfer-products-exploited-by-hackers

https://thehackernews.com/2024/12/cleo-file-transfer-vulnerability-under.html

https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild

https://support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisory

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3