8.4
CVSSv3

CVE-2024-4978

Published: 23/05/2024 Updated: 31/05/2024
CVSS v3 Base Score: 8.4 | Impact Score: 6 | Exploitability Score: 1.7
VMScore: 0

Vulnerability Summary

Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

javs javs viewer 8.3.7.250

Vendor Advisories

Check Point Reference: CPAI-2024-0363 Date Published: 2 Jun 2024 Severity: High ...

Recent Articles

JAVS courtroom recording software backdoored in supply chain attack
BleepingComputer • Sergiu Gatlan • 23 May 2024

JAVS courtroom recording software backdoored in supply chain attack By Sergiu Gatlan May 23, 2024 05:17 PM 0 Attackers have backdoored the installer of widely used Justice AV Solutions (JAVS) courtroom video recording software with malware that lets them take over compromised systems. The company behind this software, also known as JAVS, says the digital recording tool currently has over 10,000 installations in many courtrooms, legal offices, correctional facilities, and government agencies...

Suspected supply chain attack backdoors courtroom recording software
The Register

Topics Security Off-Prem On-Prem Software Offbeat Special Features Vendor Voice Vendor Voice Resources An open and shut case, but the perps remain at large – whoever they are

Justice is served… or should that be saved now that audio-visual software deployed in more than 10,000 courtrooms is once again secure after researchers uncovered evidence that it had been backdoored for weeks. The incident is being treated as a suspected supply chain attack at Justice AV Solutions (JAVS) by researchers at security shop Rapid7, which launched an investigation following an alert in a customer's MDR solution. JAVS is a Kentucky-based software vendor that specializes in developin...