CVE-2024-55956

CVE-2024-55956 is a critical remote code execution vulnerability affecting Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24. It allows an unauthenticated attacker to execute arbitrary Bash or PowerShell commands on the host system by exploiting the default settings of the Autorun directory. With a CVSS score of 9.8, this vulnerability presents a severe risk, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity. This CVE is actively exploited in the wild, notably by the Cl0p ransomware group, and has publicly available exploit modules in Metasploit and Nuclei, indicating widespread exploitability. The high EPSS score, FAUCET Risk Score, and extensive community discussion underscore its critical nature and immediate threat.