In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
https://www.securityweek.com/western-alliance-bank-discloses-data-breach-linked-to-cleo-hack/
https://hackread.com/ransomware-attacks-hit-record-high-in-february-2025/
https://www.theregister.com/2025/02/28/cisa_kev_list_ransomware/
https://www.theregister.com/2024/12/10/cleo_vulnerability/
https://therecord.media/multiple-cleo-file-transfer-products-exploited-by-hackers
https://thehackernews.com/2024/12/cleo-file-transfer-vulnerability-under.html
Published: 2024-10-28
Updated: 2025-03-10
Known Exploited Vulnerability (KEV)
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: Critical
EPSS: 0.93992
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability of Interest