Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:connectwise:screenconnect:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Worm-like Campaign Leveraging Modified ScreenConnect Clients

Threat actors are using social engineering to deploy modified, backdoored ScreenConnect clients that automate multi-stage payload execution and self-propagation across connected remote hosts.

ScreenConnect remote-access worm lateral-movement
1r 4t 1c updated
critical threat

ConnectWise ScreenConnect Authentication Bypass Vulnerability Exploitation

Exploitation of CVE-2024-1709 in ConnectWise ScreenConnect allows attackers to bypass authentication via the SetupWizard.aspx endpoint, potentially leading to unauthorized administrative access and remote code execution.

Elastic Defend +1 connectwise screenconnect authentication bypass cve-2024-1709
2r 1t 2c updated