Description
ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| screenconnect | connectwise / screenconnect | >= 0, <= 23.9.7 | affected |
| ScreenConnect | ConnectWise / ScreenConnect | >= 0, <= 23.9.7 | affected |