CVE-2024-397176.6Medium
Versa Director Dangerous File Type Upload Vulnerability
Versa · Director
Exploited in the wild · in CISA KEV since 23 Aug 2024Vendor fix availableExploitation attributed to Volt Typhoon (per Black Lotus Labs, The Hacker News)
4.0%probability of exploitation in the next 30 days
90th percentile
050100
Higher than 90% of scored CVEs
6.6MediumCVSS
LowMediumHighCrit.
Federal deadline
CISA KEV · added 23 Aug · catalogue entry
Passed 774 days ago
DescriptionNVD
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite Icon) option can be mis-used to upload a malicious file ending with .png extension to masquerade as image file. This is possible only after a user with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin has successfully authenticated and logged in.
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Coverage1 article · 1 outlet
First in our coverage: The Hacker News, 28 Oct.
- Volt Typhoon Used Silent Train in Four Zero Day CampaignsThe Hacker News · first in our coverage
New articles also arrive in the RSS feed.