VulnerabilitycriticalExploited in the wild

Attackers exploiting ConnectWise ScreenConnect flaws, fixes available for all users (CVE-2024-1709, CVE-2024-1708)

Help Net Securityby @zeljkazorzFeb 22, 2024 · 00:00 UTC (Feb 22, 2024)2 min read1 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2024-1709 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-1709 CVE-2024-1708

Tags: cve-2024-1709 cve-2024-1708 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-1709 +1 related CVE CVE-2024-1708	Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts	10.0 group max	100%	KEVRansomwarePoC ×3	Feb 21, 2024 KEV Feb 22, 2024

From the original article

2 min read at helpnetsecurity.com

The two ScreenConnect vulnerabilities ConnectWise has recently urged customers to patch have finally been assigned CVE numbers: CVE-2024-1709 for the authentication bypass, CVE-2024-1708 for the path traversal flaw. ConnectWise has also released a newer version of ScreenConnect (v23. 9.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.