CVE-2024-1708

Improper limitation of a pathname to a restricted directory (“path traversal”)

ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

Affected

ConnectWise · ScreenConnect

CVSS v3.1 NVD

8.4 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS

95.44% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2026-04-28, used in ransomware campaigns

Nuclei

high · CWE-22

Published

2024-02-21

Updated

2026-08-04

Proof-of-concept exploits (5)

• https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-a…
• W01fh4cker/ScreenConnect-AuthBypass-RCE113★ · 2024-07-16
• cjybao/CVE-2024-1709-and-CVE-2024-17081★ · 2024-04-02
• watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc76★ · 2024-02-25
• razureink/cve-2024-1708-connectwise_rce_reproduction0★ · 2026-07-24

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1708.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/connectwise_screencon…

Security advisories

• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23…
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1708

References

• CVE Record
• NVD entry

Related

• CVE-2020-0688
• CVE-2022-33891
• CVE-2023-1671
• CVE-2023-20198
• CVE-2023-46747
• CVE-2023-47246