Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
2024-05-29
2024-06-19
Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.