CVE-2023-25718

CVE-2023-25718 is a critical vulnerability affecting ConnectWise Control through version 22.9.10032, where attackers can append malicious instructions to legitimately signed executable files without invalidating the signature. This allows for the delivery of attacker-controlled executables to end-users, potentially leading to full system compromise. With a CVSS score of 9.8 (CRITICAL), it presents a high-impact threat due to its network-based attack vector, low attack complexity, and potential for complete confidentiality, integrity, and availability compromise. While there are no known active exploits, public exploit code, or significant community discussion, organizations should implement available ConnectWise Control mitigations to address this severe risk.