Log in Start free

Actively exploited · Published May 31, 2024 · Assigned by VulnCheck

CVE-2024-23692Rejetto HTTP File Server 2.3m Unauthenticated RCE

Critical 9.8 Exploited Ransomware

In plain English

A critical-severity security flaw in HTTP File Server from Rejetto. Attackers are actively exploiting it in the wild (listed by CISA on July 9, 2024). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 99.5% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)99.5%top 0.1% of all CVEs
Exploited in the wildYesCISA KEV since Jul 9, 2024
Attack tooling3Metasploit, Nuclei, Public PoC

CISA guidance

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by Jul 30, 2024.

Official description

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

Affected products (as reported)

VendorProductVersions
Rejetto HTTP File Server 0 – through 2.3m

Weakness: CWE-1336 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References