by Kastro
Paper/Archive/CVE-2024-1709

CVE-2024-1709

ConnectWise ScreenConnect — Authentication bypass using an alternate path or channel

KEV · due 29 Febransomware useEPSS 100%public exploitSSVC actCVSS 10.0
critical.is priorityof 100
100
CVSS 10.0 (CNA)10.0 / 10 × 3030.0In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

Affected

ProductAffectedFixed inSource
ScreenConnect≤ 23.9.7–CNA
screenconnect≤ 23.9.7–CISA-ADP

Scores by source

cisa-cg (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refconnectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8refhuntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8refhuntress.com/blog/detection-guidance-for-connectwise-cwe-288-2refbleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flawrefgithub.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-pocrefgithub.com/rapid7/metasploit-framework/pull/18870refhorizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-divereftechcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploitrefsecurityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitationrefhuntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypassrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709kevcisa.gov/known-exploited-vulnerabilities-catalog