Description
ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- ConnectWise / ScreenConnect0 – 23.9.7
Exploits & proofs of concept
- nucleiConnectWise ScreenConnect <= 23.9.7 - Path Traversalby popy21
Updated 17m ago · 8 sources