Vulnerability identifier: #VU78240

Vulnerability risk: High

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2023-24489

CWE-ID: CWE-284

Exploitation vector: Network

Exploits in database: 2

• July 26, 2023
  • CVE-2023-24489-PoC (CVE-2023-24489 PoC & Exploiter) [Github]
• July 15, 2023
  • CVE-2023-24489-ShareFile (This project is a Python script that exploits the CVE-2023-24489 vulnerability in ShareFile. It allows remote command execution on the target server. The script supports both Windows and Linux (On testing) platforms, and it can b [Github]

Impact: Code execution

Vulnerable software:
ShareFile storage zones controller
Server applications / File servers (FTP/HTTP)

Vendor: