CVE-2024-1708 ConnectWise ScreenConnect
ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.
- CVSS
- 8.4 High
- EPSS
- 95%
- Percentile
- 100
- Published
- 2024-02-21
- Force
- 10 of 12
- Public PoC
- 1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
On CISA’s exploited list
ConnectWise ScreenConnect Path Traversal Vulnerability
- Added
- 2026-04-28
- Federal patch deadline
- 2026-05-12
- Ransomware use
- known