CVE coverage

CVE-2024-1708

CVSS 8.4 Actively exploited (KEV) 16 detections found

ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

Detection rules

Source	Rule	Status	Updated
elastic	ScreenConnect Server Spawning Suspicious Processes	production	2026-09-18
elastic	Suspicious ScreenConnect Client Child Process	production	2026-09-18
splunk	Nginx ConnectWise ScreenConnect Authentication Bypass	production	2026-09-08
splunk	ConnectWise ScreenConnect Path Traversal	production	2026-05-13
splunk	ConnectWise ScreenConnect Authentication Bypass	production	2026-05-13
splunk	ConnectWise ScreenConnect Path Traversal Windows SACL	production	2026-05-13
sigma	Potentially Suspicious File Download From File Sharing Domain Via PowerShell.EXE	test	2026-03-29
sigma	Remote Access Tool - ScreenConnect Potential Suspicious Remote Command Execution	test	2024-02-28
sigma	Remote Access Tool - ScreenConnect Remote Command Execution - Hunting	test	2024-02-26
sigma	Remote Access Tool - Simple Help Execution	test	2024-02-23
sigma	ScreenConnect - SlashAndGrab Exploitation Indicators	test	2024-02-23
sigma	Weak or Abused Passwords In CLI	test	2024-02-23
sigma	User Added To Highly Privileged Group	test	2024-02-23
sigma	CVE-2024-1708 - ScreenConnect Path Traversal Exploitation	test	2024-02-21
sigma	CVE-2024-1708 - ScreenConnect Path Traversal Exploitation - Security	test	2024-02-20
sigma	Suspicious PowerShell IEX Execution Patterns	test	2022-11-28