RULE(RULE ID:338549)

Rule General Information
Release Date: 2024-11-19
Rule Name: Vesystem Cloud Desktop System newserver Remote Command Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Vesystem Cloud Desktop System is a desktop virtualization product based on NGD (Next Generation Desktop) architecture. There is a remote command execution vulnerability in the newserver interface of this system. This vulnerability can be used to execute any system code on the server side to obtain server permissions, and then control the entire web server.
Impact: An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.