CVE-2024-22514

Summary

CVE-2024-22514 is a newly discovered vulnerability affecting the iSpyConnect.com Agent DVR software version 5.1.6.0. This issue allows attackers to execute arbitrary files by restoring a specially crafted backup file, potentially leading to serious security consequences. An attacker can exploit this vulnerability by tricking the user into restoring a malicious backup file, granting the attacker unauthorized access and control over the affected system. Organizations using iSpyConnect.com Agent DVR are advised to apply the latest software patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.