CVE-2024-23692criticalunder attackransomwareCWE-1336

CVE-2024-23692: critical vulnerability in Rejetto HTTP File Server

Rejetto HTTP File Server 2.3m Unauthenticated RCE

Published · Updated

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 99%
from disclosure to weapon11 days
Published on NVDMay 31
1st PoC+11d
metasploitMay 25
CISA KEV+39d
exploitation probability
99%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
27 public exploit(s)
Action required by CISAfederal deadline: 2024-07-30

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

Rejetto HTTP File Server version 2.3m and earlier has a critical flaw that allows anyone on the internet to run malicious commands on the affected computer by sending a specially crafted request. No login is required, making it extremely dangerous.

Technical detail

A template injection vulnerability in Rejetto HFS ≤2.3m enables unauthenticated remote code execution via crafted HTTP requests. The vulnerability stems from improper template processing that fails to sanitize user input, allowing an attacker to inject and execute arbitrary commands on the host system without authentication.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Rejetto · HTTP File Server
public PoCs found — 27
exploitdbwww.exploit-db.com/exploits/52102unverifiedgithubgithub.com/verylazytech/CVE-2024-23692★ 49githubgithub.com/jakabakos/CVE-2024-23692-RCE-in-Rejetto-HFS★ 16githubgithub.com/0x20c/CVE-2024-23692-EXP★ 13githubgithub.com/vanboomqi/CVE-2024-23692★ 12githubgithub.com/BBD-YZZ/CVE-2024-23692★ 7githubgithub.com/NanoWraith/CVE-2024-23692★ 4githubgithub.com/pradeepboo/Rejetto-HFS-2.x-RCE-CVE-2024-23692★ 1githubgithub.com/NingXin2002/HFS2.3_poc★ 1githubgithub.com/sandimfz/CVE-2024-23692★ 0githubgithub.com/WanLiChangChengWanLiChang/CVE-2024-23692-RCE★ 0githubgithub.com/wgetnz/hfs2★ 0githubgithub.com/Mr-r00t11/CVE-2024-23692★ 0githubgithub.com/Tupler/CVE-2024-23692-exp★ 0githubgithub.com/999gawkboyy/CVE-2024-23692_Exploit★ 0vulncheckvulncheck.com/xdb/0a411a2452d2unverifiedvulncheckvulncheck.com/xdb/4ac87aa915cbunverifiedvulncheckvulncheck.com/xdb/46740685e776unverifiedvulncheckvulncheck.com/xdb/d5b6ecca1a09unverifiedvulncheckvulncheck.com/xdb/92d41c55acaaunverifiedvulncheckvulncheck.com/xdb/c299ffad376aunverifiedvulncheckvulncheck.com/xdb/9cd77e6b6f2eunverifiedvulncheckvulncheck.com/xdb/6274be6d1fb5unverifiedvulncheckvulncheck.com/xdb/2a1f7d7aff04unverifiedvulncheckvulncheck.com/xdb/c1ccd57299eaunverifiedvulncheckvulncheck.com/xdb/2ec70b75b126unverifiedvulncheckvulncheck.com/xdb/c6a68c1f041cunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://github.com/rapid7/metasploit-framework/pull/19240https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/https://vulncheck.com/advisories/rejetto-unauth-rcehttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23692https://www.vicarius.io/vsociety/posts/cve-2024-23692-detect-rejetto-hfs-vulnerabilityhttps://www.vicarius.io/vsociety/posts/cve-2024-23692-rejetto-hfs-mitigate-vulnerabilityhttps://www.vicarius.io/vsociety/posts/unauthenticated-rce-flaw-in-rejetto-http-file-server-cve-2024-23692