CVE-2024-50623

描述： In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

---

CVE-2024-50623 allows a remote unauthenticated attacker to both read arbitrary files from the target system and write arbitrary files to the target system. Security firm watchTowr published a technical analysis of this vulnerability. The vendor guidance for CVE-2024-50623 indicates that CVE-2024-50623 was exploited in the wild circa October 2024, and several IOCs related to web shells were published from this time.

We researched a separate but similar vulnerability in December 2024, CVE-2024-55956, and our Rapid7 Analysis compares and contrast these two vulnerabilities, CVE-2024-50623 and CVE-2024-55956.