CVE Pulse
KO
CVE DatabaseCVE-2024-1709
한국어 권고문 →
CVE-2024-170910.0/CRITICALCISA KEVCWE-288

CVE-2024-1709 Technical Vulnerability Analysis & Patch Advisory (CVSS 10)

Affected Vendors
security-advisory
Affected Components
enterprise-software
Published Date
2024-02-21

Executive & SecOps Summary

SECOPS ASSESSMENT
Affected Scope

Systems running unpatched versions impacted by CVE-2024-1709

Impact

Impact] ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, whic...

Mitigation

Apply vendor security patches and restrict external network exposure.

Affected Products & Version Scope

All unpatched versions listed in the official NVD CPE configurations

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Remediation Steps

  • Upgrade to the latest patched release from the vendor.
  • Apply virtual patching or network segmentation until maintenance windows allow full patching.
Recommended Security Control & Mitigation Partner
Cloudflare Enterprise & Pro WAF
Reduce your attack surface immediately with automated vulnerability scanning and runtime protection.

Block Exploits Instantly with Managed Virtual Patching Rules

Can't patch production immediately? Deploy managed WAF rules at the edge to intercept RCE, SQLi, and deserialization payloads before they hit your origin server.

3-min setup · Automated Zero-Day Managed Rules
Deploy Instant WAF Protection Free
Practice Exploiting & Patching This Web Vulnerability in an Interactive Lab
Launch Hands-On Security Lab

Technical Root Cause & Exploitation Mechanics

Technical Overview

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel

vulnerability, which may allow an attacker direct access to confidential information or

critical systems.

  • CVSS Score: 10 (CRITICAL)
  • CWE IDs: CWE-288

Official Vendor Advisories & References

NVD Original English Description

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

https://github.com/rapid7/metasploit-framework/pull/18870
Source: 9119a7d8-5eab-497f-8521-727c672e3725 · Issue Tracking, Patch, Third Party Advisory
https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc
Source: 9119a7d8-5eab-497f-8521-727c672e3725 · Exploit, Third Party Advisory
https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/
Source: 9119a7d8-5eab-497f-8521-727c672e3725 · Press/Media Coverage, Third Party Advisory
https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/
Source: 9119a7d8-5eab-497f-8521-727c672e3725 · Press/Media Coverage, Third Party Advisory
https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8
Source: 9119a7d8-5eab-497f-8521-727c672e3725 · Vendor Advisory
https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/
Source: 9119a7d8-5eab-497f-8521-727c672e3725 · Third Party Advisory
SecOps Advisory Dispatch & RSS Feed

Subscribe to Daily Vulnerability Briefings & KEV Alerts

Concise morning briefings for SecOps, DevSecOps, and SRE teams covering newly exploited CVEs and mitigation priorities.

Slack / Teams / RSS Feed: