High-Risk Vulnerabilities in ConnectWise ScreenConnect

🗓️ 20 Feb 2024 20:03:12Reported by Rapid7Type

High-Risk Vulnerabilities in ConnectWise ScreenConnect affecting versions 23.9.7 and earlier. CVE-2024-1709 is an authentication bypass, while CVE-2024-1708 is a path traversal issue, both potentially exploited by adversaries for ransomware attacks. Urgent update to 23.9.8 and IOC search recommended.

Reporter	Title	Published	Views	Family All 75
GithubExploit	Exploit for Path Traversal in Connectwise Screenconnect	24 Jul 202606:35	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect	22 Mar 202421:20	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect	16 Oct 202408:05	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect	21 Feb 202409:42	–	githubexploit
GithubExploit	Exploit for Path Traversal in Connectwise Screenconnect	21 Feb 202405:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect	14 Aug 202622:45	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	10 Mar 202608:01	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect	16 Sep 202518:59	–	githubexploit
ICS	#StopRansomware: Black Basta	10 May 202412:00	–	ics
ATTACKERKB	CVE-2024-1709	21 Feb 202400:00	–	attackerkb