All CVEs
CVE-2024-55956
CRITICAL9.8
CISA KEV
Published 2024-12-13 · Updated 2026-08-05 · Source cve@mitre.org
Description
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-77CWE-77
CISA Known-Exploited Vulnerability
Product: Cleo — Multiple Products
Name: Cleo Multiple Products Unauthenticated File Upload Vulnerability
Date added: 2024-12-17 · Due: 2025-01-07
USED IN RANSOMWARE
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
References
- https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Advisory-CVE-Pending
- https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update
- https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-55956