CVE-2024-7694
Analyzed
Published: 12 Aug 2024, 03:00
Last modified:18 Feb 2026, 04:56
Vulnerability Summary
Overall Risk (default)
medium
29/100 CVSS Score
7.2 HIGH
v3.1 (cve.org)
EPSS Score
2.22% LOW
2% probability +0.85%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
12 Aug 2024, 03:00
Published
Vulnerability first disclosed
17 Feb 2026, 00:00
Added to CISA KEV
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
18 Feb 2026, 04:56
Last Modified
Vulnerability information updated
10 Mar 2026, 00:00
CISA Remediation Due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.
CVSS Metrics
- v3.1•HIGH•Score: 7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Trends
Current EPSS score: 2.22%• Percentile: 84%
Techniques & Countermeasures
- CWE-434•Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Affected Systems
- Unknown•ThreatSonar Anti-Ransomware
≤ 3.4.5 | < 3.5.0