VULNERABILITY INTELLIGENCE

CVE-2024-7694

CVSS score7.2 HIGH
EPSS probability1.79%
CISA KEVKnown exploited vulnerability
Published2024-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

Vendor / product: TeamT5 / ThreatSonar Anti-Ransomware

Description

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

Weakness classification

  • twcert@cert.org.tw: CWE-434

Primary references