Critical Authentication Bypass Vulnerability in ConnectWise ScreenConnect

What changed

ConnectWise has disclosed a serious authentication bypass vulnerability affecting its ScreenConnect product. This flaw allows attackers to exploit an alternate path or channel to gain unauthorized access to sensitive information and critical systems.

The vulnerability affects all versions of ConnectWise ScreenConnect prior to 23.9.7, highlighting the importance of timely updates and patches.

Who is affected

Organizations using ConnectWise ScreenConnect are at risk due to this vulnerability. The following groups are particularly vulnerable:

IT service providers and managed service providers relying on ScreenConnect for remote access and support.

• ConnectWise ScreenConnect users prior to version 23.9.7
• IT service providers utilizing ConnectWise for remote support
• Organizations managing sensitive data through ScreenConnect
• Any enterprise relying on ConnectWise for remote access solutions

What to do

It is crucial for affected organizations to take immediate action to mitigate risks associated with this vulnerability. Updating to the latest version of ConnectWise ScreenConnect is strongly recommended.

Additionally, organizations should review their security protocols and ensure that access controls are in place to protect sensitive information.

• Upgrade to ConnectWise ScreenConnect version 23.9.7 or later
• Conduct a security audit of current access controls
• Implement additional monitoring for unusual access patterns
• Educate staff about the risks associated with remote access vulnerabilities