# MA-1084.062024: MyCERT Advisory - Critical Vulnerabilities in MOVEit Products

**Date:** 27 Jun 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1084.062024  
**Advisory ID:** MA-1084.062024

---

**1.0 Introduction**
Recently, Progress Software identified and patched two vulnerabilities (CVE-2024-5805) and (CVE-2024-5806) in their MOVEit product which is a widely used managed file transfer (MFT) software.
**2.0 Impact**
These vulnerabilities allowed attackers to bypass authentication and potentially gain access to systems.
**3.0 Affected Products**
- **MOVEit Gateway** - CVE-2024-5805:  Score:9.1 Critical: This critical vulnerability affects MOVEit Gateway, a component that allows MOVEit Transfer to receive connections behind a firewall. It specifically impacts the SFTP module and could be exploited for unauthorized access. This issue affects MOVEit Gateway 2024.0.0.
- **MOVEit Transfer SFTP** - CVE-2024-5806: CVSS Score:9.1 Critical- This high-risk vulnerability resides in the MOVEit Transfer SFTP service itself. In certain configurations, it could also lead to authentication bypass. This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.
**4.0 RecommendationsNOTICE: All MOVEit Transfer customers must take action and apply the patch to address the June 2024 vulnerability discovered in MOVEit Transfer**. 
CyberSecurity Malaysia urges users and organizations to review the MOVEit Transfer Advisory, follow the mitigation steps, apply the necessary updates, and hunt for any malicious activity.
Kindly refer to the following URL: 
- <https://community.progress.com/s/article/MOVEit-Gateway-Critical-Security-Alert-Bulletin-June-2024-CVE-2024-5805>
- <https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806>
Generally, we advise users of this device to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17.30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/) 
**6.0    References**
- <https://community.progress.com/s/article/MOVEit-Gateway-Critical-Security-Alert-Bulletin-June-2024-CVE-2024-5805>
- <https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806>