CVE-2024-55956

🗓️ 13 Dec 2024 00:00:00Reported by mitreType

Cleo Harmony, VLTrader, and LexiCom allow arbitrary command execution by unauthenticated users.

Reporter	Title	Published	Views	Family All 9
CISA KEV Catalog	Cleo Multiple Products Unauthenticated File Upload Vulnerability	17 Dec 202400:00	–	cisa_kev
Cvelist	CVE-2024-55956	13 Dec 202400:00	–	cvelist
NVD	CVE-2024-55956	13 Dec 202421:15	–	nvd
NVD	CVE-2024-12632	13 Dec 202421:15	–	nvd
CVE	CVE-2024-55956	13 Dec 202421:15	–	cve
CVE	CVE-2024-12632	13 Dec 202421:15	–	cve
Nuclei	Cleo Harmony < 5.8.0.24 - File Upload Vulnerability	18 Dec 202413:39	–	nuclei
AttackerKB	CVE-2024-55956	13 Dec 202400:00	–	attackerkb
Rapid7 Blog	Widespread Exploitation of Cleo File Transfer Software (CVE-2024-55956)	10 Dec 202414:04	–	rapid7blog

Source	Link
support	www.support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Advisory-CVE-Pending

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2024 00:00Current

7.8High risk

Vulners AI Score7.8

EPSS0.891