CVE-2024-1708

ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

• CWE-22
• CWE-22

• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8Vendor Advisory
• https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypassExploit, Third Party Advisory
• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8Vendor Advisory
• https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypassExploit, Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1708Third Party Advisory, US Government Resource
• https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/Technical Description

Published

Feb 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1702A vulnerability was found in keerti1924 PHP-MYSQL-User-Login…9.8
• CVE-2024-1703A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It h…5.3
• CVE-2024-1704A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It h…8.1
• CVE-2024-1705A vulnerability was found in Shopwind up to 4.6. It has been…8.1
• CVE-2024-1706A vulnerability was determined in ZKTeco ZKBio Access IVS up…5.4
• CVE-2024-1707A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2024-1709ConnectWise ScreenConnect 23.9.7 and prior are affected by a…10
• CVE-2024-1710The Addon Library plugin for WordPress is vulnerable to unau…8.8
• CVE-2024-1711The Create by Mediavine plugin for WordPress is vulnerable t…9.8
• CVE-2024-1712The Carousel Slider WordPress plugin before 2.2.7 does not s…4.7
• CVE-2024-1713A user who can create objects in a database with plv8 3.2.1 …7.2
• CVE-2024-1714An issue exists in all supported versions of IdentityIQ Life…7.1