Critical · published December 14, 2024
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.
🚨 An unauthenticated user can execute ANY Bash or PowerShell commands on your system! This is a serious issue lurking in Cleo Harmony, VLTrader, and LexiCom versions before 5.8.0.24! 🔥 Think of the Autorun directory as a restaurant kitchen where chefs can cook whatever they want without a head chef approving the menu. If someone sneaks in and takes control, they could whip up a disaster! An attacker could gain full control of your system, install malware, delete critical files, or exfiltrate sensitive data—essentially turning your network into their playground. This vulnerability is absolutely devastating, and if left unpatched, it could lead to catastrophic breaches for your organization.
Think of the Autorun directory as a restaurant kitchen where chefs can cook whatever they want without a head chef approving the menu. If someone sneaks in and takes control, they could whip up a disaster! This vulnerability allows unauthenticated users to import and execute arbitrary commands through the Autorun directory, bypassing critical security measures and directly interacting with the host system.
An attacker could gain full control of your system, install malware, delete critical files, or exfiltrate sensitive data—essentially turning your network into their playground. This vulnerability is absolutely devastating, and if left unpatched, it could lead to catastrophic breaches for your organization. Patch immediately to version 5.8.0.24 or later for Cleo Harmony, VLTrader, and LexiCom. Review your Autorun settings and ensure only trusted sources can execute commands. Implement strict access controls to mitigate the risk of exploitation. You've got this! With quick action, you can secure your systems and maintain your hero status in cybersecurity! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| cleo/harmony | < 5.8.0.24 | 5.8.0.24 |
| cleo/lexicom | < 5.8.0.24 | 5.8.0.24 |
| cleo/vltrader | < 5.8.0.24 | 5.8.0.24 |