References https://nvd.nist.gov/vuln/detail/CVE-2024-50623 https://support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisory-CVE-2024-50623 https://labs.watchtowr.com/cleo-cve-2024-50623/ https://www.rapid7.com/blog/post/2024/12/10/etr-widespread-exploitation-of-cleo-file-transfer-software-cve-2024-50623/ https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild https://github.com/verylazytech/CVE-2024-50623 https://www.cve.org/CVERecord?id=CVE-2024-50623 https://beazley.security/alerts-advisories/critical-vulnerability-in-cleo-software-cve-2024-50623 https://www.acunetix.com/vulnerabilities/web/cleo-harmony-vltrader-lexicom-rce-cve-2024-50623-cve-2024-55956/ https://cn-sec.com/archives/3540451.html
Related VulnerabilitiesPoCCVE-2024-50623: Cleo Harmony < 5.8.0.21 - Arbitary File ReadPoCCVE-2024-55956: Cleo Harmony < 5.8.0.24 - File Upload VulnerabilityPoCCVE-2024-50623: Cleo Synchronization 任意文件读取PoCCVE-2024-55956: Cleo Harmony,VLTrader,LexiCom < 5.8.0.24 - File Upload VulnerabilityCleo文件传输软件 /Synchronization 文件读取漏洞(CVE-2024-50623)Cleo文件传输软件Synchronization 存在任意文件读取漏洞(CVE-2024-50623)