Description
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- ConnectWise / ScreenConnectAll versions prior to 26.6.5 – All versions prior to 26.6.5
- ConnectWise / ScreenConnect26.6.5.9742
Updated 9m ago · 8 sources