CVE-2024-41111

Summary

CVE-2024-41111 is a recently disclosed vulnerability affecting Sliver, an open-source red team framework. In its prerelease version 1.6.0, Sliver is vulnerable to Remote Code Execution (RCE), which can be exploited by a low-privileged "operator" user with system-level privileges. This breach of security boundary contravenes past warnings that operators should not be able to execute commands or code on the server. Successful exploitation grants the attacker access to console logs, the ability to kick other operators, and permission to modify or delete server files. The vulnerability is yet to be addressed, and users are advised against using Sliver 1.6.0 prerelease in production environments.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.