Threat Signal ReportConnectWise ScreenConnect Vulnerabilities (CVE-2024-1708 and CVE-2024-1709)
Description
| What is the Vulnerability? | On February 19, 2024, ConnectWise published a security advisory for their remote desktop application software called ScreenConnect. One of the flaws, CVE-2024-1709 is an authentication bypass vulnerability that could let attackers gain administrative access to a ScreenConnect instance. That vulnerability has a public proof-of-concept (PoC) available and recently been added to CISA's known exploited catalog. The second flaw tracked as CVE-2024-1708 is a path traversal vulnerability that may allow an attacker to execute remote code. |
| What is the Vendor Solution? |
ConnectWise has released a patch covering both vulnerabilities. [ Link ]
|
| What FortiGuard Coverage is available? |
FortiGuard Labs has released endpoint vulnerability signatures to detect vulnerable systems running on the network. FortiGuard Labs recommends companies to apply the most recent upgrade or patch from the vendor as soon as possible. |
Outbreak Alert
Threat actors including ransomware gangs are seen exploiting newly discovered critical flaws in remote monitoring and management software called ScreenConnect.
Appendix
Connectwise (Advisory and Mitigation)
✖
