CVE-2024-57727criticalunder attackransomwareCWE-22

CVE-2024-57727

Published · Updated

Follow this CVE+ Monitor SimpleHelp

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.1epss 97%
from disclosure to weapon2 days
Published on NVDJan 15
1st PoC+2d
metasploitJan 12
CISA KEV+29d
Action required by CISAfederal deadline: 2025-03-06

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

SimpleHelp remote support software versions 5.5.7 and earlier allow anyone on the internet to download any file from the server without logging in, including secret passwords and configuration files that should be protected.

Technical detail

Path traversal vulnerability (CWE-22) in SimpleHelp ≤5.5.7 permits unauthenticated attackers to craft malicious HTTP requests that bypass directory restrictions and retrieve arbitrary files from the host filesystem. The vulnerability exposes sensitive data including server configuration files and hashed credentials with no authentication requirement.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.