Critical Path Traversal Vulnerability Discovered in ConnectWise ScreenConnect

What changed

ConnectWise ScreenConnect versions 23.9.7 and earlier are now recognized as vulnerable to a path traversal issue. This flaw enables attackers to manipulate file paths, which could lead to unauthorized access and execution of remote code.

The implications of this vulnerability are severe, as it can directly affect the integrity of confidential data and critical systems within organizations using the affected software.

Who is affected

Organizations utilizing ConnectWise ScreenConnect for remote access and support services are at risk. This vulnerability poses a threat to any entity relying on this software for operational efficiency.

Particularly vulnerable groups include IT service providers, managed service providers, and businesses that employ ScreenConnect for remote desktop management.

• ConnectWise ScreenConnect users
• IT service providers leveraging remote support tools
• Managed service providers utilizing ScreenConnect
• Enterprises relying on remote access solutions

What to do

It is crucial for affected organizations to assess their current versions of ConnectWise ScreenConnect and implement necessary updates. Users should prioritize upgrading to the latest version to mitigate the risks associated with this vulnerability.

Additionally, organizations should review their security protocols and ensure that they are prepared to respond to potential exploitation attempts.

• Upgrade to the latest version of ConnectWise ScreenConnect
• Conduct a security audit to identify potential vulnerabilities
• Enhance monitoring for suspicious activities related to remote access
• Implement strict access controls and user permissions