SimpleHelp Path Traversal Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jan 15, 2025 · Catalog

   Detected

   SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

2. Feb 13, 2025 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Mar 6, 2025 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Aug 3, 2026 · Catalog

   Updated

   SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

Affected

• cpe simple-help/simplehelpversion unspecified
• vendor SimpleHelp SimpleHelpversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2024-57727

  SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.

  cisa.gov
• CVE.orgVulnerability recordCVE-2024-57727

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2024-57727

  30-day exploitation probability 96.6%

  first.org
• Metasploit ModulesPublic exploit moduleauxiliary_scanner/http/simplehelp_toolbox_path_traversal

  Public module reference (normal). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDVulnerability recordCVE-2024-57727

  SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration file

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• CISA note · simple-help.com
• Release Notes · simple-help.com
• US Government Resource · cisa.gov
• CISA note · cisa.gov
• Third Party Advisory · horizon3.ai