Summary
generated automatically from NVD dataCVE-2024-1709 is an authentication bypass in ConnectWise ScreenConnect 23.9.7 and earlier, caused by an alternate path or channel weakness (CWE-288). An attacker could use it to gain direct access to confidential information or critical systems. It carries a CVSS v3.1 score of 10.0 (CRITICAL) and is listed in the CISA KEV catalog, with known use in ransomware campaigns.
NVD description
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.
⚠️ Actively exploited — CISA KEV
This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2024-02-22. It is confirmed exploited in the wild and must be patched as a priority.
Remediation deadline (US federal agencies): 2024-02-29
Used in known ransomware campaigns.
EPSS · FIRST.org
100.0%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 21 févr. 2024
- Updated
- 17 juin 2026
- Status
- Analyzed
- Source
- 9119a7d8-5eab-497f-8521-727c672e3725
Affected products
Weaknesses (CWE)
References (21)
- https://github.com/rapid7/metasploit-framework/pull/18870Issue TrackingPatchThird Party Advisory
- https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-pocExploitThird Party Advisory
- https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/Press/Media CoverageThird Party Advisory
- https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/Press/Media CoverageThird Party Advisory
- https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2ExploitThird Party Advisory
- https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/Press/Media CoverageThird Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/18870Issue TrackingPatchThird Party Advisory
- https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-pocExploitThird Party Advisory
- https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/Press/Media CoverageThird Party Advisory
- https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/Press/Media CoverageThird Party Advisory
- + 6 more references on NVD
Similar CVEs
Other vulnerabilities of type CWE-288
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.