Critical Vulnerabilities in ConnectWise ScreenConnect Patched

On February 19, 2024 ConnectWise published a bulletin for on‑premises ScreenConnect addressing two critical vulnerabilities — an authentication-bypass that can lead to remote code execution (CVSS 10) and a path traversal issue (CVSS 8.4). Cloud-hosted ScreenConnect instances have been updated; organizations running on-premises ScreenConnect 23.9.7 or earlier are advised to immediately upgrade to 23.9.8. Arctic Wolf warns threat actors are highly likely to target these severe, low-complexity flaws given ScreenConnect’s historical misuse, though no active exploitation or PoC had been observed at the time of the advisory.