Skip to content

CVE-2024-1709 ConnectWise ScreenConnect

ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.

CVSS: not scored

On CISA’s exploited list

ConnectWise ScreenConnect Authentication Bypass Vulnerability

Added: 2024-02-22
Federal patch deadline: 2024-02-29
Ransomware use: known

Actors known to use it (MITRE ATT&CK)

Medusa Group52 techniques

NVD CVE.org All exploited vulnerabilities