CVE-2024-7694KEV · OVERDUECWE-434

TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload

High · published August 12, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.2. It is confirmed in active exploitation. It sits in the 78.2th percentile for exploit probability.

228
days past CISA
deadline
CVSS v3.1
7.2
EPSS
2%
Percentile
78.2
In the wild
Confirmed
What it is

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01792 · 78.2th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-08-12T03:00Z
KEV added
2026-02-17 · due 2026-03-10
EPSS history
Timeline
  • 17 FEB 00:00Z
    Added to CISA KEV — remediate by Mar 10
    kev
  • 12 AUG 03:00Z
    TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload
    cvelistv5