SC
Remote Access
ScreenConnect
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 7Low 0
Watch
Add ScreenConnect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1708 RansomwareIn wildKEV | 8.4 | Feb 21 | Improper limitation of a pathname to a restricted directory (“path traversal”) Affected: through 23.9.7 |
| CVE-2025-3935 In wildKEV | 7.2 | Apr 25 | ScreenConnect Exposure to ASP.NET ViewState Code Injection Affected: <25.2.3 |
| CVE-2023-25719 | 8.8 | Feb 13 | ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter Affected: before 22.9.10032 |
| CVE-2019-16513 | 8.8 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2023-47257 | 8.1 | Feb 1 | ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages Affected: before 23.8.5 |
| CVE-2019-16514 | 7.2 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
Showing 6