CVE-2024-1708

CVSS

—

EPSS

0.954 (99.9th percentile)

CISA KEV

Added 2026-04-28, due 2026-05-12

Exploitation

No report

Public exploits

1 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards23 Feb 2024, 00:00

  SlashAndGrab | Huntress

  Adversaries have been VERY busy in the wake of the ScreenConnect vulnerabilities (CVE-2024-1709 & CVE-2024-1708). Here’s all the post-exploitation details, tradecraft, and tactics we’ve observed so far!

  ↗huntress.com/blog/slashandgrab-screen-connect-p…(opens the publisher's site in a new tab)
• 

  ● Actively exploitedCritical 100Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards21 Feb 2024, 00:00

  ConnectWise ScreenConnect CVE-2024-1709 & CVE-2024-1708 | Huntress

  This blog discusses the Huntress Team's analysis efforts of the two vulnerabilities and software weaknesses in ConnectWise ScreenConnect (CVE-2024-1708 and CVE-2024-1709) and the technical details behind this attack.

  ↗huntress.com/blog/a-catastrophe-for-control-und…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:31poc publishedpoc-in-github
2. 24 Sept, 12:16poc publishedpoc-in-github
3. 24 Sept, 11:53poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev