SECURITYApr 29 · 08:46 UTCTHE HACKER NEWS[email protected] (The Hacker News)

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

CISA added two actively exploited vulnerabilities to its KEV catalog, affecting ConnectWise ScreenConnect and Microsoft Windows. The flaws, including a path traversal vulnerability (CVE-2024-1708) with a CVSS score of 8.4, are being exploited in the wild.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

CISAorganizationConnectWise ScreenConnectproductMicrosoft WindowsproductCVE-2024-1708topicKnown Exploited Vulnerabilities (KEV)topic

Spot something wrong with this article?Report a problem →

Forward this