CVE-2024-2620

Summary

CVE-2024-2620 is a critical vulnerability affecting the Fujian Kelixin Communication Command and Dispatch Platform up to version 20240318. This issue lies in an unknown functionality of the file api/client/down_file.php, where manipulation of the argument uuid results in SQL injection. The exploit can be launched remotely and the vulnerability identifier VDB-257197 has been assigned. The public disclosure of this exploit increases the risk of attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.