Despite a patch for CVE-2024-40766, configuration shortcomings leave businesses vulnerable to ransomware attacks.