CVE-2024-4978KEV · OVERDUECWE-506

Malicious Code in Justice AV Solutions (JAVS) Viewer

High · published May 23, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.7. It is confirmed in active exploitation. It sits in the 98.0th percentile for exploit probability.

856
days past CISA
deadline
CVSS v4.0
8.7
EPSS
27%
Percentile
98.0
In the wild
Confirmed
What it is

🚨 A malicious binary sneaked its way into Justice AV Solutions Viewer, and it’s packing a punch! 💥 It’s like finding an uninvited guest at a party who’s secretly planning to hijack the music — they may look friendly, but their intentions are anything but! If exploited, this vulnerability allows a remote attacker with privileges to execute unauthorized PowerShell commands, potentially leading to total control over the system. This could mean accessing sensitive data, disrupting services, or even spreading to other systems. The consequences could be absolutely devastating!

Put simply

It’s like finding an uninvited guest at a party who’s secretly planning to hijack the music — they may look friendly, but their intentions are anything but! This vulnerability involves a malicious binary in Justice AV Solutions Viewer (version 8.3.7.250-1) that runs due to an unexpected authenticode signature. It allows remote, privileged attackers to execute arbitrary PowerShell commands without detection.

What to do

If exploited, this vulnerability allows a remote attacker with privileges to execute unauthorized PowerShell commands, potentially leading to total control over the system. This could mean accessing sensitive data, disrupting services, or even spreading to other systems. The consequences could be absolutely devastating! To protect yourself, update Justice AV Solutions Viewer to the latest patched version immediately. Conduct a thorough security audit of your systems to check for any signs of exploitation. Regularly monitor logs for any unusual activity. 🔒 You've got this! By taking action now, you'll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.26937 · 98.0th percentile
Weakness
CWE-506 · Embedded Malicious Code
Published
2024-05-23T01:56Z
KEV added
2024-05-29 · due 2024-06-19
EPSS history
Timeline
  • 29 MAY 00:00Z
    Added to CISA KEV — remediate by Jun 19
    kev
  • 23 MAY 01:56Z
    Malicious Code in Justice AV Solutions (JAVS) Viewer
    cvelistv5