Source: Ministry of education information & communication security contingency platform
Publication Number | TACERT-ANA-2024061911065959 | Publication Time | 2024/06/19 11:12 |
Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/06/19 11:12 |
Impact Level | Medium | ||
[Subject] 【Security Alert】 High-Risk Vulnerability in Justice AV Solutions Viewer (CVE-2024-4978) - Immediate Action Required |
|||
[Content] Forwarded from the National Institute of Cyber Security NISAC-200-202406-00000128 Researchers have discovered a backdoor in the installation program for Justice AV Solutions Viewer version 8.3.7.250-1 (CVE-2024-4978). When users download and install the Justice AV Solutions Viewer from the official website, the backdoor program is installed alongside it and executes unauthorized PowerShell commands in the background. This vulnerability has been exploited by hackers, and immediate verification and updates are required. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
[Affected Platform] JAVS Viewer v8.3.7.250-1 |
|||
[Recommended Actions] The official update has been released to address this vulnerability. Please update to the following version: JAVS Viewer v8.3.8 or later. |
|||
[Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2024-4978/ 2. https://www.javs.com/downloads/ 3. https://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack/ |