【Vulnerability Alert】High-Risk Vulnerability in Justice AV Solutions Viewer (CVE-2024-4978) - Immediate Action Required
publish date :
2024-06-19
update date :
2024-06-19
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2024061911065959 | Publication Time | 2024/06/19 11:12 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/06/19 11:12 |
| Impact Level | Medium | ||
| [Subject] 【Security Alert】 High-Risk Vulnerability in Justice AV Solutions Viewer (CVE-2024-4978) - Immediate Action Required |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202406-00000128 Researchers have discovered a backdoor in the installation program for Justice AV Solutions Viewer version 8.3.7.250-1 (CVE-2024-4978). When users download and install the Justice AV Solutions Viewer from the official website, the backdoor program is installed alongside it and executes unauthorized PowerShell commands in the background. This vulnerability has been exploited by hackers, and immediate verification and updates are required. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] JAVS Viewer v8.3.7.250-1 |
|||
| [Recommended Actions] The official update has been released to address this vulnerability. Please update to the following version: JAVS Viewer v8.3.8 or later. |
|||
| [Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2024-4978/ 2. https://www.javs.com/downloads/ 3. https://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack/ |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center
