A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
CVSS
9.9
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
53d ago · NVD
Added to TCL Advisory
50d ago · TCL Advisory
Added to CISA KEV
50d ago · CISA
Exploitation Status Changed
50d ago · TCL Advisory
NVD · Updated 50d ago
CISA KEV · Updated 51d ago