High severity · published Jan 15, 2025
CVE-2024-57727
SimpleHelp Path Traversal Vulnerability
RansomwareIn wildKEV
7.5
CVSS
96.8%
EPSS
Yes
On KEV
Description
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)96.8% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Feb 13, 2025
Federal remediation dueMar 6, 2025
Ransomware campaign useKnown
Affected products
Which versions
SI
Simplehelp · Simple-help
before 5.5.8 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-57727
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-57727
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
www.horizon3.ai
https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
simple-help.com
https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier
More from Simplehelp
10.0
CVE-2026-48558
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
9.9
CVE-2024-57726
SimpleHelp Missing Authorization Vulnerability
7.2
CVE-2024-57728
SimpleHelp Path Traversal Vulnerability
8.8
CVE-2025-36728
Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11
8.8
CVE-2025-36727
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12