CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-01-15
SimpleHelp Remote Support Software Arbitrary File Upload and Remote Code Execution Vulnerability (CVE-2024-57728) Security Advisory
[Affected Scope] SimpleHelp remote support software v5.5.7 and prior versions.
[Impact] Authenticated administrative users can upload a crafted ZIP archive to write arbitrary files anywhere on the file system (Zip Slip), leading to Remote Code Execution (RCE) under the context of the SimpleHelp server user.
[Mitigation] Immediately upgrade SimpleHelp to the latest secure version (v5.5.8 or later) and restrict access to the administrative interface.