{"id":"CVE-2024-1708","aliases":["EUVD-2024-17442","GHSA-65x5-26gm-j9pq"],"status":"published","title":"Improper limitation of a pathname to a restricted directory (“path traversal”)","description":"ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.95436,"percentile":0.9987,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2024-02-21T15:29:10Z","modified":"2026-08-04T03:55:56Z","kev":{"date_added":"2026-04-28","due_date":"2026-05-12","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2026-04-28"},{"source":"kev","since":"2026-04-28"}],"exploits":[{"source":"metasploit","id":"exploit/multi/http/connectwise_screenconnect_rce_cve_2024_1709","title":"ConnectWise ScreenConnect Unauthenticated Remote Code Execution","type":"exploit","platform":"Linux,Unix,Windows","date":"2024-02-19","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/connectwise_screenconnect_rce_cve_2024_1709"},{"source":"pocgithub","id":"razureink/cve-2024-1708-connectwise_rce_reproduction","title":"razureink/cve-2024-1708-connectwise_rce_reproduction","date":"2026-07-24","url":"https://github.com/razureink/cve-2024-1708-connectwise_rce_reproduction"},{"source":"nuclei","id":"CVE-2024-1708","title":"ConnectWise ScreenConnect \u003c= 23.9.7 - Path Traversal","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1708.yaml"}],"products":[{"vendor":"connectwise","product":"screenconnect"}],"references":[{"url":"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8","tags":["x_transferred","Vendor Advisory"]},{"url":"https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/","tags":["third-party-advisory","Technical Description"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1708","tags":["government-resource","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1708"},{"url":"https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations"},{"url":"https://github.com/advisories/GHSA-65x5-26gm-j9pq"}],"sources":{"cve":[{"id":"CVE-2024-1708","title":"Improper limitation of a pathname to a restricted directory (“path traversal”)","description":"ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.\n\n","status":"published","published":"2024-02-21T15:29:10.091Z","modified":"2026-08-04T03:55:56.405Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:18.597034Z"}],"euvd":[{"id":"EUVD-2024-17442","description":"ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.\n\n","status":"published","published":"2024-02-21T15:29:10Z","modified":"2026-08-04T03:55:56Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"exploited_since":"2026-04-28","updated_at":"2026-11-02T18:02:23.332335Z"}],"ghsa":[{"id":"GHSA-65x5-26gm-j9pq","title":"ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which...","description":"ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.","status":"published","published":"2024-02-21T18:31:01Z","modified":"2026-04-28T21:34:00Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:07:43.519122Z"}],"kev":[{"id":"CVE-2024-1708","title":"ConnectWise ScreenConnect Path Traversal Vulnerability","description":"ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.","cwes":["CWE-22"],"kev":{"date_added":"2026-04-28","due_date":"2026-05-12","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2024-1708","description":"ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker \n\nthe ability to execute remote code or directly impact confidential data or critical systems.\n\n","status":"published","published":"2024-02-21T16:15:50.233Z","modified":"2026-06-17T07:04:50.43Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:09:37.655131Z"}]}}