CVE-2024-55956
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
An attacker can execute dangerous commands on the server without logging in by uploading files to a special folder that runs automatically. This is critical because it gives complete control of the system to anyone on the internet.
Unauthenticated remote code execution via the Autorun directory mechanism that automatically executes arbitrary Bash or PowerShell scripts without authentication. The vulnerability exploits default configurations allowing an attacker to import and run malicious commands with system-level privileges, resulting in complete system compromise.
The full analysis of this CVE is available in Portuguese →