Vulnerability Details CVE-2024-1708
ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker
the ability to execute remote code or directly impact confidential data or critical systems.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.487
EPSS Ranking 97.6%
CVSS Severity
CVSS v3 Score 8.4
References
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8
- https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8
- https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass
Products affected by CVE-2024-1708
-
cpe:2.3:a:connectwise:screenconnect:-
-
cpe:2.3:a:connectwise:screenconnect:22.7
-
cpe:2.3:a:connectwise:screenconnect:23.8.4
-
cpe:2.3:a:connectwise:screenconnect:23.8.5