CVE coverage

CVE-2024-1709

CVSS 10.0 Actively exploited (KEV) 19 detections found

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

Detection rules

Source	Rule	Status	Updated
elastic	ScreenConnect Server Spawning Suspicious Processes	production	2026-09-18
elastic	Suspicious ScreenConnect Client Child Process	production	2026-09-18
splunk	Nginx ConnectWise ScreenConnect Authentication Bypass	production	2026-09-08
splunk	ConnectWise ScreenConnect Path Traversal	production	2026-05-13
splunk	ConnectWise ScreenConnect Authentication Bypass	production	2026-05-13
splunk	ConnectWise ScreenConnect Path Traversal Windows SACL	production	2026-05-13
sigma	Potentially Suspicious File Download From File Sharing Domain Via PowerShell.EXE	test	2026-03-29
sigma	CVE-2024-1212 Exploitation - Progress Kemp LoadMaster Unauthenticated Command Injection	test	2024-03-20
sigma	Remote Access Tool - ScreenConnect Potential Suspicious Remote Command Execution	test	2024-02-28
sigma	Remote Access Tool - ScreenConnect Remote Command Execution - Hunting	test	2024-02-26
sigma	ScreenConnect - SlashAndGrab Exploitation Indicators	test	2024-02-23
sigma	Remote Access Tool - Simple Help Execution	test	2024-02-23
sigma	User Added To Highly Privileged Group	test	2024-02-23
sigma	Weak or Abused Passwords In CLI	test	2024-02-23
sigma	CVE-2024-1708 - ScreenConnect Path Traversal Exploitation	test	2024-02-21
sigma	ScreenConnect User Database Modification	test	2024-02-21
sigma	ScreenConnect User Database Modification - Security	test	2024-02-20
sigma	CVE-2024-1709 - ScreenConnect Authentication Bypass Exploitation	test	2024-02-20
sigma	Suspicious PowerShell IEX Execution Patterns	test	2022-11-28