{"history":[{"alert":0,"cve":"CVE-2024-1709","id":22600,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.99983, \"percentile\": 0.99982}"},{"alert":0,"cve":"CVE-2024-1709","id":20220,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":0,"cve":"CVE-2024-1709","id":18189,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":0,"cve":"CVE-2024-1709","id":16253,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":0,"cve":"CVE-2024-1709","id":14231,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":0,"cve":"CVE-2024-1709","id":12013,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":0,"cve":"CVE-2024-1709","id":9999,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":0,"cve":"CVE-2024-1709","id":7547,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":1,"cve":"CVE-2024-1709","id":6161,"kind":"cna","observed_at":1793787601,"payload":"{\"containers\": {\"adp\": [{\"affected\": [{\"cpes\": [\"cpe:2.3:a:connectwise:screenconnect:-:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unaffected\", \"product\": \"screenconnect\", \"vendor\": \"connectwise\", \"versions\": [{\"lessThanOrEqual\": \"23.9.7\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}], \"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2024-1709\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-02-24T05:00:21.568850Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2024-02-22\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:24.008Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-02-22T00:00:00.000Z\", \"value\": \"CVE-2024-1709 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2024-08-01T18:48:21.899Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_transferred\"], \"url\": \"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://github.com/rapid7/metasploit-framework/pull/18870\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"ScreenConnect\", \"vendor\": \"ConnectWise\", \"versions\": [{\"changes\": [{\"at\": \"23.9.8\", \"status\": \"unaffected\"}], \"lessThanOrEqual\": \"23.9.7\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel\\n\\n vulnerability, which may allow an attacker direct access to confidential information or \\n\\n<span style=\\\"background-color: rgb(255, 255, 255);\\\">critical systems.</span>\"}], \"value\": \"ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel\\n\\n vulnerability, which may allow an attacker direct access to confidential information or \\n\\ncritical systems.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 10, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"CHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-288\", \"description\": \"CWE-288 Authentication bypass using an alternate path or channel\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-02-21T18:25:45.687Z\", \"orgId\": \"9119a7d8-5eab-497f-8521-727c672e3725\", \"shortName\": \"cisa-cg\"}, \"references\": [{\"url\": \"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8\"}, {\"url\": \"https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8\"}, {\"url\": \"https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2\"}, {\"url\": \"https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/\"}, {\"url\": \"https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc\"}, {\"url\": \"https://github.com/rapid7/metasploit-framework/pull/18870\"}, {\"url\": \"https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/\"}, {\"url\": \"https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/\"}, {\"url\": \"https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/\"}, {\"url\": \"https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"title\": \"Authentication bypass using an alternate path or channel\", \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"9119a7d8-5eab-497f-8521-727c672e3725\", \"assignerShortName\": \"cisa-cg\", \"cveId\": \"CVE-2024-1709\", \"datePublished\": \"2024-02-21T15:36:03.960Z\", \"dateReserved\": \"2024-02-21T15:05:07.113Z\", \"dateUpdated\": \"2025-10-21T23:05:24.008Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2024-1709","id":5324,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":0,"cve":"CVE-2024-1709","id":3106,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.9998, \"percentile\": 0.9998}"},{"alert":1,"cve":"CVE-2024-1709","id":685,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2024-1709\", \"cwes\": [\"CWE-288\"], \"dateAdded\": \"2024-02-22\", \"dueDate\": \"2024-02-29\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8; https://nvd.nist.gov/vuln/detail/CVE-2024-1709\", \"product\": \"ScreenConnect\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.\", \"vendorProject\": \"ConnectWise\", \"vulnerabilityName\": \"ConnectWise ScreenConnect Authentication Bypass Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"ScreenConnect","vendor":"ConnectWise","versions":[{"changes":[{"at":"23.9.8","status":"unaffected"}],"lessThanOrEqual":"23.9.7","status":"affected","version":"0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:a:connectwise:screenconnect:-:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"screenconnect","vendor":"connectwise","versions":[{"lessThanOrEqual":"23.9.7","status":"affected","version":"0","versionType":"custom"}]}],"metrics":[{"other":{"content":{"id":"CVE-2024-1709","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-02-24T05:00:21.568850Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2024-02-22","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:24.008Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709"}],"timeline":[{"lang":"en","time":"2024-02-22T00:00:00.000Z","value":"CVE-2024-1709 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2024-08-01T18:48:21.899Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8"},{"tags":["x_transferred"],"url":"https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8"},{"tags":["x_transferred"],"url":"https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2"},{"tags":["x_transferred"],"url":"https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/"},{"tags":["x_transferred"],"url":"https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc"},{"tags":["x_transferred"],"url":"https://github.com/rapid7/metasploit-framework/pull/18870"},{"tags":["x_transferred"],"url":"https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/"},{"tags":["x_transferred"],"url":"https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/"},{"tags":["x_transferred"],"url":"https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/"},{"tags":["x_transferred"],"url":"https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass"}],"title":"CVE Program Container"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"ScreenConnect","vendor":"ConnectWise","versions":[{"changes":[{"at":"23.9.8","status":"unaffected"}],"lessThanOrEqual":"23.9.7","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel\n\n vulnerability, which may allow an attacker direct access to confidential information or \n\n<span style=\"background-color: rgb(255, 255, 255);\">critical systems.</span>"}],"value":"ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel\n\n vulnerability, which may allow an attacker direct access to confidential information or \n\ncritical systems."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":10,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-288","description":"CWE-288 Authentication bypass using an alternate path or channel","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-02-21T18:25:45.687Z","orgId":"9119a7d8-5eab-497f-8521-727c672e3725","shortName":"cisa-cg"},"references":[{"url":"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8"},{"url":"https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8"},{"url":"https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2"},{"url":"https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/"},{"url":"https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc"},{"url":"https://github.com/rapid7/metasploit-framework/pull/18870"},{"url":"https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/"},{"url":"https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/"},{"url":"https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/"},{"url":"https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass"}],"source":{"discovery":"UNKNOWN"},"title":"Authentication bypass using an alternate path or channel","x_generator":{"engine":"Vulnogram 0.1.0-dev"}}},"cveMetadata":{"assignerOrgId":"9119a7d8-5eab-497f-8521-727c672e3725","assignerShortName":"cisa-cg","cveId":"CVE-2024-1709","datePublished":"2024-02-21T15:36:03.960Z","dateReserved":"2024-02-21T15:05:07.113Z","dateUpdated":"2025-10-21T23:05:24.008Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794241201,"cve":"CVE-2024-1709","description":"ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel\n\n vulnerability, which may allow an attacker direct access to confidential information or \n\ncritical systems.","epss":{"date":"2026-11-12","epss":0.99983,"percentile":0.99982},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2024-1709","cwes":["CWE-288"],"dateAdded":"2024-02-22","dueDate":"2024-02-29","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8; https://nvd.nist.gov/vuln/detail/CVE-2024-1709","product":"ScreenConnect","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.","vendorProject":"ConnectWise","vulnerabilityName":"ConnectWise ScreenConnect Authentication Bypass Vulnerability"},"kev_checked":1794522003,"products":"ConnectWise ScreenConnect","references":["https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8","https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8","https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2","https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/","https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc","https://github.com/rapid7/metasploit-framework/pull/18870","https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/","https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-easy-to-exploit/","https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/","https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1709"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":10,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"cisa-cg","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Authentication bypass using an alternate path or channel","updated_at":1794500401,"workarounds":""},"sources":[]}