ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.
https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8
https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/
https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/
https://thehackernews.com/2025/05/connectwise-hit-by-cyberattack-nation.html
https://www.theregister.com/2025/03/13/medusa_ransomware_infects_300_critical/
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-071a
https://securelist.com/vulnerabilities-and-exploits-in-q4-2024/115761/
https://hackread.com/microsoft-badpilot-campaign-seashell-blizzard-usa-uk/
https://www.theregister.com/2025/02/12/russias_sandworm_caught_stealing_credentials/
https://therecord.media/sandworm-subgroup-russia-europe
https://thehackernews.com/2025/02/microsoft-uncovers-sandworm-subgroups.html
https://securelist.com/vulnerability-exploit-report-q2-2024/113455/
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-131a
https://securelist.com/vulnerability-report-q1-2024/112554/
https://veriti.ai/blog/vulnerable-villain-when-hackers-get-hacked/
https://www.mandiant.com/resources/blog/initial-access-brokers-exploit-f5-screenconnect
Published: 2024-02-21
Updated: 2025-01-27
Named Vulnerability: SlashAndGrabNamed Vulnerability: ScreenConnect VulnerabilityNamed Vulnerability: EvilConwiNamed Vulnerability: ConnectWise ScreenConnectKnown Exploited Vulnerability (KEV)
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
Base Score: 10
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: Critical
Base Score: 10
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Severity: Critical
EPSS: 0.94338
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability of Concern