H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2024-12-13
Last seen2024-12-13

Confidence

—

Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productCleo Multiple Products
Added2024-12-13
Due date2025-01-03
2 recorded

Relationships

2 external

References

nvd
CVE-2024-50623
open
cwe
CWE-434
open