Vulnerabilitycritical
Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-57726+2 related CVEs | Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7 | 9.9 group max | 66% | KEVRansomware | KEV |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Jan 15, 2025 Vulnerability / Server Security Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution. Horizon3. ai researcher Naveen Sunkavally, in a technical report detailing the findings, said the "vulnerabilities are trivial to reverse and exploit."
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.