10.0Kritisch
KEV
In Ransomware genutzt
CVE-2024-1709Authentication bypass using an alternate path or channel
Bekannt ausgenutzt — ConnectWise ScreenConnect Authentication Bypass Vulnerability
CISA hat am 22.02.2024 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 29.02.2024.
Erforderliche Maßnahme: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8; https://nvd.nist.gov/vuln/detail/CVE-2024-1709
Beschreibung
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.
Schwachstellentyp (CWE):
CWE-288
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| ConnectWise | ScreenConnect | ≤ 23.9.7 |
Referenzen und Patches
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 Vendor Advisory
- https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8 Third Party Advisory
- https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2 ExploitThird Party Advisory
- https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/ Press/Media CoverageThird Party Advisory
- https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc ExploitThird Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/18870 Issue TrackingPatchThird Party Advisory
- https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/ Third Party Advisory
- https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-… Press/Media CoverageThird Party Advisory
- https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/ Press/Media CoverageThird Party Advisory
- https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709 US Government Resource
CPE-Treffer (NVD) (1)
cpe:2.3:a:connectwise:screenconnect:*:*:*:*:*:*:*:*< 23.9.8