Exploited vulnerability

CVE-2024-4978

TLP:CLEAR

Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.

Facts

Vendor: Justice AV Solutions
Product: Viewer
CVSS: 8.7
EPSS (probability of exploitation within 30 days): 26.9 %
On CISA's Known Exploited Vulnerabilities list since: 29 May 2024
First known exploitation: 29 May 2024
CISA's deadline for US federal agencies: 19 June 2024
Weakness: CWE-506
First seen by Risk Letters: 29 May 2024

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD