ConnectWise ScreenConnect auth bypass mass-exploited ยท updates https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709 ConnectWise ScreenConnect before 23.9.8 had a trivially exploitable authentication bypass (CVE-2024-1709, CVSS 10) and a path traversal (CVE-2024-1708), reported to ConnectWise on 2024-02-19. Attackers could create an admin account on self-hosted servers and then push code to every managed endpoint. Exploitation began within days, including by ransomware groups. Cloud instances were patched by ConnectWise; on-premise servers had to update to 23.9.8. Added to the CISA KEV catalog on 2024-02-22. CISA lists known use in ransomware campaigns. en Thu, 22 Feb 2024 00:00:00 GMT ConnectWise ScreenConnect auth bypass mass-exploited: CISA added CVE-2024-1709 to the KEV catalog (federal deadline 2024-02-29) https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709 https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709#2024-02-22-74a57c96 Thu, 22 Feb 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> ConnectWise ScreenConnect auth bypass mass-exploited: ConnectWise urges on-premise partners to update to 23.9.8 immediately https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709 https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709#2024-02-22-27cd47e0 Thu, 22 Feb 2024 00:00:00 GMT critical <p><a href="https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8">Source</a></p> ConnectWise ScreenConnect auth bypass mass-exploited: CVE-2024-1709 published https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709 https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709#2024-02-21-018bbbd9 Wed, 21 Feb 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-1709">Source</a></p> ConnectWise ScreenConnect auth bypass mass-exploited: CVE-2024-1708 published https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709 https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709#2024-02-21-c9baa92e Wed, 21 Feb 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-1708">Source</a></p> ConnectWise ScreenConnect auth bypass mass-exploited: Both vulnerabilities reported to ConnectWise; cloud instances remediated https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709 https://pwn.watch/i/connectwise-screenconnect-auth-bypass-cve-2024-1709#2024-02-19-c0d20988 Mon, 19 Feb 2024 00:00:00 GMT critical <p><a href="https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8">Source</a></p>