CVE-2024-1708 (ScreenConnect Zip Slip) Vulnerability: Analysis & Detection
A high security flaw (CVE-2024-1708) has been found in ScreenConnect Zip Slip.
A high security flaw (CVE-2024-1708) has been found in ScreenConnect Zip Slip.
This requires local or already-authenticated access to reach.
Anyone running ScreenConnect Zip Slip 23.9.8 is exposed, specifically wherever ScreenConnect Zip Slip is actually deployed rather than just licensed or installed somewhere unused.
What an attacker actually gains: successful exploitation allows the attacker to execute code with the permissions of the affected process.
This is tracked as CVE-2024-1708 and rated high severity, which is the identifier to use when checking vendor guidance.
The affected versions are 23.9.8, so that's the range to check against your own deployment.
Confirm whether ScreenConnect Zip Slip 23.9.8 is present anywhere in your asset and software inventory.
No exploitation has been reported yet, but that status can change, so keep watching vendor guidance while you remediate.
What happened
A high security flaw (CVE-2024-1708) has been found in ScreenConnect Zip Slip.
This requires local or already-authenticated access to reach.
Who is affected
Anyone running ScreenConnect Zip Slip 23.9.8 is exposed, specifically wherever ScreenConnect Zip Slip is actually deployed rather than just licensed or installed somewhere unused.
Why it matters
What an attacker actually gains: successful exploitation allows the attacker to execute code with the permissions of the affected process.
Technical details
This is tracked as CVE-2024-1708 and rated high severity, which is the identifier to use when checking vendor guidance.
The affected versions are 23.9.8, so that's the range to check against your own deployment.
What security teams should do
Confirm whether ScreenConnect Zip Slip 23.9.8 is present anywhere in your asset and software inventory.
No exploitation has been reported yet, but that status can change, so keep watching vendor guidance while you remediate.