CVE Watch—

CVE-2024-1709

ConnectWise ScreenConnect Authentication Bypass Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

22 de fev. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

ConnectWise / ScreenConnect

Vulnerabilidade

ConnectWise ScreenConnect Authentication Bypass Vulnerability

Adicionado ao KEV

22 de fev. de 2024

Corrigir até

29 de fev. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8; https://nvd.nist.gov/vuln/detail/CVE-2024-1709

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-848699.9 CRÍ

60.6%

KEV—68ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability55d CVE-2024-1708—

99.9%

KEV—80ConnectWise ScreenConnect Path Traversal Vulnerability—CVE-2025-3935—

89.5%

KEV—77ConnectWise ScreenConnect Improper Authentication Vulnerability—