Ransomware Attacks via Malicious File Uploads
CVE-2024-7694
Key Information:
- Vendor
Teamt5
- Vendor
- CVE Published:
- 12 August 2024
Badges
What is CVE-2024-7694?
An issue has been identified in ThreatSonar Anti-Ransomware by TeamT5 where the application fails to adequately validate the content of files uploaded by users. This can enable remote attackers, who possess administrator privileges on the product’s platform, to submit malicious files. The incorporation of such files can lead to the execution of arbitrary commands on the server, thereby putting the integrity and security of the system at significant risk.
CISA has reported CVE-2024-7694
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2024-7694 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected Version(s)
ThreatSonar Anti-Ransomware 0 <= 3.4.5