CVE-2024-50623- Cleo Unrestricted file upload and download
Become VeryLazyTech member! 🎁
Follow us on:
✖ Twitter @VeryLazyTech.
👾 Github @VeryLazyTech.
📜 Medium @VeryLazyTech.
📺 YouTube @VeryLazyTech.
📩 Telegram @VeryLazyTech.
🕵️♂️ My Site @VeryLazyTech.
Visit our shop for e-books and courses. 📚
Overview
CVE-2024-50623 is a critical vulnerability identified in Cleo's file transfer software products—Cleo Harmony, Cleo VLTrader, and Cleo LexiCom—versions prior to 5.8.0.21. This flaw allows for unrestricted file uploads and downloads, potentially leading to remote code execution.
Affected Devices
Cleo Harmony (prior to version 5.8.0.21)
Cleo VLTrader (prior to version 5.8.0.21)
Cleo LexiCom (prior to version 5.8.0.21)
Affected Components
The Cleo software automatically processes files from specific directories like autorun without proper validation or sandboxing. This creates a security risk because attackers can write arbitrary files to these directories, which are then executed by the software.
Read about it — CVE-2024-50623
Disclaimer: This Proof of Concept (POC) is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.
Getting Started
Finding Targets
To find potential targets, use Fofa (similar to Shodan.io):
Fofa Dork: body="packages/partnerlogos/userportal_logo" && title="KACE Systems Management Appliance Service Center"
Cloning the Repository
First, clone the repository:
git clone https://github.com/verylazytech/CVE-2024-50623Run the Exploit:
For Linux :
bash ./cve-2024-50623.sh -t <target> -a <read|Write> -f <FileToRead|WhereToWrite> [--w <local_file_to_write>] [--proxy <proxy_url>]Learn & practice For the OSCP.
Last updated
Was this helpful?