H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2024-02-22
Last seen2024-02-22

Confidence

—

ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productConnectWise ScreenConnect
Added2024-02-22
Due date2024-02-29
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2024-1709
open
cwe
CWE-288
open