Lucene search

PRIOn knowledge basePRION:CVE-2023-47256

HistoryFeb 01, 2024 - 10:15 p.m.

Code injection

2024-02-0122:15:00

PRIOn knowledge base

www.prio-n.com

connectwise screenconnect

code injection

vulnerability

nvd

relay servers

proxy settings

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings

CPENameOperatorVersion
screenconnectlt23.8.5

CPE	Name	Operator	Version
	screenconnect	lt	23.8.5

References

web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256

www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix