Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-50623
CVE-2024-50623:
NixOS vulnerability analysis and mitigation
Overview
CVE-2024-50623 is a critical unrestricted file upload and download vulnerability affecting Cleo's managed file transfer (MFT) products: Harmony, VLTrader, and LexiCom versions before 5.8.0.21. The vulnerability was discovered and disclosed on December 9, 2024, and allows unauthenticated remote code execution (Censys, Recorded Future).
Technical details
The vulnerability stems from insufficient input validation, improper path sanitization, and weak license verification logic within the /Synchronization endpoint of the affected Cleo software. This endpoint facilitates file synchronization, transfer, and command-based file operations between Cleo cluster nodes. The vulnerability has received a CVSS v3.1 base score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating its severe nature and ease of exploitation (NVD, Recorded Future).
Impact
The vulnerability enables unauthenticated attackers to achieve remote code execution on affected systems. At the time of discovery, there were 1,618 exposed Cleo instances on Censys and 1,234 on Shodan, with approximately 50% of exposed instances geolocated in the United States. The widespread exposure makes this vulnerability particularly concerning for organizations using affected Cleo products (Recorded Future, Censys).
Mitigation and workarounds
Cleo has released version 5.8.0.21 to address the vulnerability and strongly advises all customers to immediately upgrade their instances of Harmony, VLTrader, and LexiCom to this version. However, according to security researchers, version 5.8.0.21 may not fully address the vulnerability, and Cleo is preparing a new patch (Cleo Advisory, Recorded Future).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management