CVE-2024-559560

Name of the Vulnerable Software and Affected Versions Cleo Harmony versions prior to 5.8.0.25 VLTrader versions prior to 5.8.0.25 LexiCom versions prior to 5.8.0.25

Description The issue allows an unauthenticated attacker to execute arbitrary Bash or PowerShell commands on the host system by exploiting default Autorun directory settings.

Recommendations For Cleo Harmony versions prior to 5.8.0.25, update to version 5.8.0.25 or later. For VLTrader versions prior to 5.8.0.25, update to version 5.8.0.25 or later. For LexiCom versions prior to 5.8.0.25, update to version 5.8.0.25 or later.