Lucene search

K
nvd[email protected]NVD:CVE-2023-47257
HistoryFeb 01, 2024 - 10:15 p.m.

CVE-2023-47257

2024-02-0122:15:55
CWE-94
web.nvd.nist.gov
1
connectwise screenconnect
vulnerability
remote code execution
crafted messages

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

53.3%

ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages.

Affected configurations

NVD
Node
connectwiseautomateMatch-
OR
connectwisescreenconnectRange<23.8.5

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

53.3%

Related for NVD:CVE-2023-47257