CVE-2024-1709

CVE-2024-1709 is a critical authentication bypass vulnerability affecting ConnectWise ScreenConnect versions 23.9.7 and prior. This flaw allows unauthenticated attackers to gain direct access to confidential information and critical systems. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. The vulnerability is actively exploited, including in known ransomware campaigns and by nation-state actors, with public exploit modules and significant community discussion confirming its widespread attention and danger.