Vulnerabilityhigh
SimpleHelp RMM vulnerabilities may have been exploited to breach healthcare orgs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-57726+2 related CVEs | Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7 | 9.9 group max | 66% | KEVRansomware | KEV |
From the original article
4 min read at helpnetsecurity.com
Attackers may have exploited vulnerabilities in the SimpleHelp remote monitoring and management solution to gain initial access to healthcare organizations. On January 13, 2025, Horizon3. ai researchers revealed their discovery of three vulnerabilities (CVE-2024-57726, CVE-2024-57727, CVE-2024-57728) affecting SimpleHelp’s server component, which would allow attackers to: Download files from the SimpleHelp server (e.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.