10.0Kritik
KEV
Fidye yazılımında kullanılıyor
CVE-2024-1709Authentication bypass using an alternate path or channel
Aktif olarak istismar ediliyor — ConnectWise ScreenConnect Authentication Bypass Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 22.02.2024 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 29.02.2024.
Gerekli işlem: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8; https://nvd.nist.gov/vuln/detail/CVE-2024-1709
Açıklama
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.
Zayıflık türü (CWE):
CWE-288
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ConnectWise | ScreenConnect | ≤ 23.9.7 |
Kaynaklar ve yamalar
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 Vendor Advisory
- https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8 Third Party Advisory
- https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2 ExploitThird Party Advisory
- https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/ Press/Media CoverageThird Party Advisory
- https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc ExploitThird Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/18870 Issue TrackingPatchThird Party Advisory
- https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/ Third Party Advisory
- https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-… Press/Media CoverageThird Party Advisory
- https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/ Press/Media CoverageThird Party Advisory
- https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709 US Government Resource
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:connectwise:screenconnect:*:*:*:*:*:*:*:*< 23.9.8