Description
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel
vulnerability, which may allow an attacker direct access to confidential information or
critical systems.
Metrics
CVSS 3.1 10.0/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| ConnectWise | ScreenConnect | <= 23.9.7 |
| connectwise | screenconnect | <= 23.9.7 |
References
- https://github.com/rapid7/metasploit-framework/pull/18870Issue Tracking, Patch, Third Party Advisory
- https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-pocExploit, Third Party Advisory
- https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/Press/Media Coverage, Third Party Advisory
- https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/Press/Media Coverage, Third Party Advisory
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8Vendor Advisory
- https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/Third Party Advisory
- https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypassExploit, Third Party Advisory
- https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2Exploit, Third Party Advisory
- https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8Third Party Advisory
- https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/Press/Media Coverage, Third Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/18870Issue Tracking, Patch, Third Party Advisory
- https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-pocExploit, Third Party Advisory
- https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/Press/Media Coverage, Third Party Advisory
- https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/Press/Media Coverage, Third Party Advisory
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8Vendor Advisory
- https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/Third Party Advisory
- https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypassExploit, Third Party Advisory
- https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2Exploit, Third Party Advisory
- https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8Third Party Advisory
- https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/Press/Media Coverage, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709US Government Resource
Timeline
- Published
- Feb 21, 2024
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Feb 22, 2024
- NVD status
- Analyzed