HTTP: Cleo Unrestricted File Upload And Download Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Cleo Unrestricted File Upload And Download. A successful attack can lead to arbitrary code execution.
Extended Description
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
Affected Products
Cleo vltrader
References
CVE: CVE-2024-50623
Short Name
HTTP:CTS:CLEO-FL-UL-DL-RCE
Severity
Critical
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
And CVE-2024-50623 Cleo Code Download Execution File Remote Unrestricted Upload
Release Date
12/19/2024
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3767
False Positive
Unknown
Vendors
Cleo