Description
A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- ConnectWise / ScreenConnectAll versions prior to 26.1 – All versions prior to 26.1
- ConnectWise / ScreenConnectAll server versions prior to 26.1 – All server versions prior to 26.1
Updated 13m ago · 8 sources