VDB
CVE-2024-55956
CVE-2024-55956
PUBLISHED
KEV
CVSS 8.600000381469727 HIGH
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.
EPSS 93.97% · 99.8th percentile
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
93.97%
99.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cleo | lexicom | 0 |
| cleo | harmony | 0 |
| cleo | vltrader | 0 |
| n/a | n/a | n/a |
Timeline
- Dec 10, 2024 VulnCheck KEV Exploitation
- Dec 13, 2024 CVE Published
- Dec 13, 2024 PoC Published
- Dec 13, 2024 PoC Published
- Dec 14, 2024 EPSS Score
- Dec 15, 2024 VulnCheck KEV Exploitation
- Dec 15, 2024 PoC Published
- Dec 15, 2024 PoC Published
- Dec 15, 2024 PoC Published
- Dec 16, 2024 VulnCheck KEV Exploitation
- Dec 16, 2024 PoC Published
- Dec 16, 2024 PoC Published
References
- Nuclei Template exploit
- https://nvd.nist.gov/vuln/detail/CVE-2024-55956 advisory
- https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Advisory-CVE-Pending url
- https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-55956 url
- https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild url