CVE-2024-1709

ConnectWise ScreenConnect Authentication Bypass Vulnerability

Screenconnect

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

21. Feb 2024

Ausgewertete Quellen

• Hersteller
  https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8
• Hinweis
  https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/
• Hinweis
  https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/
• Hinweis
  https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/
• Hinweis
  https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass
• Hinweis
  https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2
• Hinweis
  https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8
• Hinweis
  https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709
• CISA
  ConnectWise ScreenConnect Authentication Bypass Vulnerability
• NVD
  CVE-2024-1709
• GitHub
  https://github.com/rapid7/metasploit-framework/pull/18870
• GitHub
  https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc