Multiple Vulnerabilities Found In ConnectWise ScreenConnect
Tags
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Shell - T1505.003 Vulnerabilities - T1588.006 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID 2addb671-9aad-4d5e-be9f-683a0f6f1285
Fingerprint ac0f19d2e93701c5
Analysis status DONE
Considered CTI value 1
Text language
Published March 21, 2024, midnight
Added to db Aug. 31, 2024, 10:42 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline Multiple Vulnerabilities Found In ConnectWise ScreenConnect
Title Multiple Vulnerabilities Found In ConnectWise ScreenConnect
Detected Hints/Tags/Attributes 57/1/14
Source URLs
Redirection Url
Details Source https://www.zscaler.com/blogs/security-research/multiple-vulnerabilities-found-connectwise-screenconnect
URL Provider
Details Provider Source level domain
Details zscaler.com www.zscaler.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 406 ✔ Security Research | Blog Category Feed https://www.zscaler.com/blogs/feeds/security-research 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 29 
cve-2024-1709
Details CVE 25 
cve-2024-1708
Details Domain 1 
connectwise.com
Details Domain 6 
huntress.com
Details Domain 4128 
github.com
Details File 6 
setupwizard.aspx
Details File 8 
user.xml
Details File 2126 
cmd.exe
Details Github username 3 
w01fh4cker
Details IPv4 1 
155.133.5.15
Details IPv4 1 
155.133.5.14
Details IPv4 1 
118.69.65.60
Details Url 1 
https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw
Details Url 1 
https://github.com/w01fh4cker/screenconnect-authbypass-rce