POC详情： a1d3e4f20153579ca753f419a3dce2aae816bbf6

来源
https://github.com/verylazytech/CVE-2024-50623
关联漏洞
标题： Cleo多款产品 安全漏洞 (CVE-2024-50623)
描述：Cleo LexiCom等都是Cleo公司的产品。Cleo LexiCom是一个集成平台。Cleo Harmony是一个文件集成解决方案。Cleo VLTrader是一个安全托管文件传输软件。 Cleo多款产品存在安全漏洞，该漏洞源于包含一个JavaScript注入问题。以下产品及版本受到影响：Cleo Harmony 5.8.0.20版本之前，VLTrader 5.8.0.20版本之前和LexiCom 5.8.0.20版本。
描述
CVE-2024-50623 POC - Cleo Unrestricted file upload and download
介绍
# POC - CVE-2024-50623- Cleo Unrestricted file upload and download

[![My Shop](https://img.shields.io/badge/My%20Shop-verylazytech-%23FFDD00?style=flat&logo=buy-me-a-coffee&logoColor=yellow)](https://buymeacoffee.com/verylazytech/extras)
[![Medium](https://img.shields.io/badge/Medium-%40verylazytech-%231572B6?style=flat&logo=medium&logoColor=white)](https://medium.com/@verylazytech)
[![Github](https://img.shields.io/badge/Github-verylazytech-%23181717?style=flat&logo=github&logoColor=white)](https://github.com/verylazytech)
[![Buy Me A Coffee](https://img.shields.io/badge/Buy%20Me%20A%20Coffee-verylazytech-%23FFDD00?style=flat&logo=buy-me-a-coffee&logoColor=yellow)](https://buymeacoffee.com/verylazytech)

## Overview

CVE-2024-50623 is a critical vulnerability identified in Cleo's file transfer software products—Cleo Harmony, Cleo VLTrader, and Cleo LexiCom—versions prior to 5.8.0.21. This flaw allows for unrestricted file uploads and downloads, potentially leading to remote code execution.

# Affected Devices

- Cleo Harmony (prior to version 5.8.0.21)
- Cleo VLTrader (prior to version 5.8.0.21)
- Cleo LexiCom (prior to version 5.8.0.21)

# Affected Components

The Cleo software automatically processes files from specific directories like autorun without proper validation or sandboxing. This creates a security risk because attackers can write arbitrary files to these directories, which are then executed by the software.

**Read about it** — [CVE-2024-50623](https://nvd.nist.gov/vuln/detail/CVE-2024-50623)

> **Disclaimer**: This Proof of Concept (POC) is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

## Getting Started

### Finding Targets

To find potential targets, use Fofa (similar to Shodan.io):

- **Fofa Dork**: body="packages/partnerlogos/userportal_logo" && title="KACE Systems Management Appliance Service Center"

![Fofa1111](https://github.com/user-attachments/assets/810a7eb4-f664-4b7e-915c-35c1c6b490e0)

### Cloning the Repository

First, clone the repository:

```bash
git clone https://github.com/verylazytech/CVE-2024-50623
```

Run the Exploit:

### For Linux :
```bash
bash ./cve-2024-50623.sh -t <target> -a <read|Write> -f <FileToRead|WhereToWrite> [--w <local_file_to_write>] [--proxy <proxy_url>]
```

![Exploit1111](https://github.com/user-attachments/assets/a3427b1d-456d-4a51-9cd2-f23a6c3520f8)
文件快照
 [4.0K]  /data/pocs/a1d3e4f20153579ca753f419a3dce2aae816bbf6
├── [4.0K]  cve-2024-50623.sh
└── [2.6K]  README.md

0 directories, 2 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。