CRITICAL CISA KEV

CVE-2023-24489

CVSS v3

9.8

CRITICAL

EPSS Score

94.4%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.

CISA Known Exploited Vulnerability

Date Added
8/16/2023
Patch Due Date
9/6/2023
Ransomware Use
Unknown

Technical details

Published
7/10/2023

Frequently asked questions

What is CVE-2023-24489?

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.

Is CVE-2023-24489 actively exploited?

Yes. CVE-2023-24489 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 9/6/2023.

What is the CVSS score for CVE-2023-24489?

CVE-2023-24489 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2023-24489 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.