H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2024-57727

SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.

Vulnerability
TypeVulnerability
External ID—
First seen2025-02-13
Last seen2025-02-13

Confidence

—

SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productSimpleHelp SimpleHelp
Added2025-02-13
Due date2025-03-06
6 recorded

Relationships

mitigates
from Remediate CVE-2024-57727
Mitigation
related-to
to Manipulating Web Input to File System Calls
Technique
related-to
to Path Traversal
Technique
related-to
to Using Escaped Slashes in Alternate Encoding
Technique
related-to
to Using Slashes and URL Encoding Combined to Bypass Validation Logic
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
2 external

References

nvd
CVE-2024-57727
open
cwe
CWE-22
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance