Exploiting the latest max-severity ConnectWise bug is 'embarrassingly easy'

Infosec researchers disclosed a critical authentication-bypass RCE (CVSS 10) and a path traversal (CVSS 8.4) in ConnectWise ScreenConnect (affecting versions up to 23.9.7). Working PoCs were developed and attacks were later confirmed in the wild; attackers have used trivial exploits to gain administrative access and achieve RCE, and ConnectWise recommends immediate patching to 23.9.8 for on-prem installations. Limited IOCs (three IP addresses) and data showing ~3,800 vulnerable instances were provided, with no temporary mitigations beyond updating.