QID 150816

ConnectWise ScreenConnect is a Remote desktop and access software.

Multiple versions of ConnectWise ScreenConnect are affected by the following vulnerabilities:
CVE-2024-1708: A Path-traversal vulnerability that may allow an attacker to execute remote code or directly impact confidential data or critical systems.
CVE-2024-1709: An Authentication Bypass vulnerability using an Alternate Path or Channel, which may allow an attacker direct access to confidential information or critical systems.

Affected Versions:
ConnectWise ScreenConnect 23.9.7 and prior

QID Detection Logic (Unauthenticated):
This QID sends an HTTP GET request and checks the "Server" HTTP Response header to determine vulnerable version of ConnectWise ScreenConnect running on the target system.

Successful exploitation of these vulnerabilities could allow an attacker to execute remote code or directly impact confidential data or critical systems.