sign in--:--:--UTC

CVE-2024-1709

exploited in the wild

CVSS

10.0

Reports

4

First seen

Feb 21

Last seen

Oct 8

Affected product

ConnectWise ScreenConnect versions below 23.9.8

Associated actors

Cuba ×1 GhostLocker ×1 INC ×1 Kasseika ×1 Medusa ×1 RansomHub ×1 Rhysida ×1

Recent reports

Top 3 Cybersecurity Threats of 2024: RMM Abuse, BYOVD Attacks, and WebDAV Abuse

Huntress BlogOct 8 Critical

SlashAndGrab ConnectWise ScreenConnect Authentication Bypass Vulnerability

Huntress BlogAug 3 Critical

Guide: How to Know if your ScreenConnect Server is Hacked

Huntress BlogFeb 23 Critical

ConnectWise ScreenConnect CVE-2024-1709 & CVE-2024-1708 Authentication Bypass and Path Traversal

Huntress BlogFeb 21

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans