RansomwarecriticalExploited in the wild

CISA orders to fix ConnectWise ScreenConnect bug in a week

Security Affairsby @securityaffairsFeb 23, 2024 · 00:46 UTC (Feb 23, 2024)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-1709 CVE-2024-1708

Tags: cve-2024-1709 cve-2024-1708 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-1709 +1 related CVE CVE-2024-1708	Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts	10.0 group max	100%	KEVRansomwarePoC ×3	Feb 21, 2024 KEV Feb 22, 2024

Indicators of compromise

auto-extracted · verify before use · export allAll

Type	Indicator	Context
domain	hostedrmm.com	reenConnect servers hosted in “screenconnect.com” cloud or “hostedrmm.com” have been updated to remediate the issue. On-premise Partn
domain	screenconnect.com	ons needed by the partner, ScreenConnect servers hosted in “screenconnect.com” cloud or “hostedrmm.com” have been updated to remediate th

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds ConnectWise ScreenConnect bug to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.