Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2024-1708
HistoryFeb 21, 2024 - 4:15 p.m.

Path traversal

2024-02-2116:15:00
PRIOn knowledge base
www.prio-n.com
5
connectwise
screenconnect
path-traversal
vulnerability
remote code
confidential data
critical systems
nvd

8.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:M/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

16.2%

JSON

ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker

the ability to execute remote code or directly impact confidential data or critical systems.

CPENameOperatorVersion
screenconnectlt23.9.8

Related

cve 1
cvelist 1
metasploit 1
hivepro 2
rapid7blog 1
thn 3
packetstorm 1
nessus 1
trendmicroblog 1
securelist 1
avleonov 1
cve
cve
CVE-2024-1708
2024-02-21 16:15:50
cvelist
cvelist
CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)
2024-02-21 15:29:10
metasploit
metasploit
ConnectWise ScreenConnect Unauthenticated Remote Code Execution
2024-02-22 16:34:43
hivepro
hivepro
Critical Vulnerabilities in ScreenConnect Under Active Exploitation
2024-02-23 06:45:12
Attacks, Vulnerabilities and Actors 19 to 25 February 2024
2024-02-27 07:44:12
rapid7blog
rapid7blog
High-Risk Vulnerabilities in ConnectWise ScreenConnect
2024-02-20 20:03:12
thn
thn
FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks
2024-02-28 13:06:00
Critical Flaws Found in ConnectWise ScreenConnect Software - Patch Now
2024-02-20 10:38:00
Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware
2024-03-05 16:18:00
packetstorm
packetstorm
ConnectWise ScreenConnect 23.9.7 Unauthenticated Remote Code Execution
2024-02-24 00:00:00
nessus
nessus
ConnectWise ScreenConnect Service < 23.9.8 Multiple Vulnerabilities
2024-02-22 00:00:00
trendmicroblog
trendmicroblog
Threat Actor Groups, Including Black Basta, are Exploiting Recent ScreenConnect Vulnerabilities
2024-02-27 00:00:00
securelist
securelist
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
avleonov
avleonov
February 2024: Vulremi, Vuldetta, PT VM Course relaunch, PT TrendVulns digests, Ivanti, Fortinet, MSPT, Linux PW
2024-03-05 18:43:32

8.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:M/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

16.2%

JSON
Related for PRION:CVE-2024-1708
cve1cvelist1metasploit1hivepro2rapid7blog1thn3packetstorm1nessus1trendmicroblog1securelist1avleonov1