RansomwarecriticalExploited in the wild

Critical Flaws Found in ConnectWise ScreenConnect Software

The Hacker Newsby @TheHackersNewsFeb 28, 2024 · 12:55 UTC (Feb 28, 2024)3 min read1

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-1708 CVE-2024-1709

Tags: cve-2024-1708 cve-2024-1709 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-1709 +1 related CVE CVE-2024-1708	Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts	10.0 group max	100%	KEVRansomwarePoC ×3	Feb 21, 2024 KEV Feb 22, 2024

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Feb 20, 2024 Vulnerability / Network Security ConnectWise has released software updates to address two security flaws in its ScreenConnect remote desktop and access software, including a critical bug that could enable remote code execution on affected systems. CVE-2024-1708 (CVSS score: 8. 4) - Improper limitation of a pathname to a restricted directory aka "path traversal"

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.