CVE-2024-57727

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Aug 4, 2026

Description

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlierRelease Notes
https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727US Government Resource

Timeline

Published: Jan 15, 2025
Last modified: Aug 4, 2026
Added to CISA KEV: Feb 13, 2025
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-577287.2SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a CVE-2024-57739.8A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown fu CVE-2024-57749.8A vulnerability has been found in SourceCodester Stock Management System 1.0 and classified as critical. Affected by this vulnerability is a CVE-2024-57758.8A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2024-577577.5JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava.CVE-2024-577606.5JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java.CVE-2024-577618.1An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via CVE-2024-577627.5MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.CVE-2024-577639.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.CVE-2024-577649.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.CVE-2024-577657.5MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.CVE-2024-577669.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.