exploit/multi/http/connectwise_screenconnect_rce_cve_2024_1709

weaponized

ConnectWise ScreenConnect Unauthenticated Remote Code Execution

view exploit source metasploittype exploitpublished 2024-02-19catalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-1709UScritical10.0OT criticalKEV
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to…
CVE-2024-1708UShigh8.4OT criticalKEV
ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confide…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan