CVE-2024-1709

CVSS

—

EPSS

1.000 (100.0th percentile)

CISA KEV

Added 2024-02-22, due 2024-02-29

Exploitation

No report

Public exploits

5 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards23 Feb 2024, 00:00

  SlashAndGrab | Huntress

  Adversaries have been VERY busy in the wake of the ScreenConnect vulnerabilities (CVE-2024-1709 & CVE-2024-1708). Here’s all the post-exploitation details, tradecraft, and tactics we’ve observed so far!

  ↗huntress.com/blog/slashandgrab-screen-connect-p…(opens the publisher's site in a new tab)
• 

  ● Actively exploitedCritical 100Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards21 Feb 2024, 00:00

  ConnectWise ScreenConnect CVE-2024-1709 & CVE-2024-1708 | Huntress

  This blog discusses the Huntress Team's analysis efforts of the two vulnerabilities and software weaknesses in ConnectWise ScreenConnect (CVE-2024-1708 and CVE-2024-1709) and the technical details behind this attack.

  ↗huntress.com/blog/a-catastrophe-for-control-und…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:29poc publishedpoc-in-github
2. 24 Sept, 11:50kev addedcisa-kev