CG-2024-00002
ClosedConnectwise ScreenConnect Authentication Bypass
Summary
ConnectWise addressed ScreenConnect vulnerabilities enabling unauthorized administrator account creation, with a published exploit of trivial difficulty significantly elevating the risk. This exploit is being used by Ransomware crews. Immediate update to version 23.9.8 is required for self-hosted/on-premise users. Confirmed compromised accounts and associated threat actor IP addresses are shared on the ConnectWise website.