Clearing the Air: Overblown Claims of Vulnerabilities, Exploits & Severity

Huntress analyzes claims of critical ConnectWise Control vulnerabilities and finds no evidence of a novel, in-the-wild remote code execution; the dominant observed threat is phishing/social engineering that leads victims to install legitimate Control clients pointed at attacker infrastructure. The report documents URL parameter abuse and an on-premises Host-header/ClickOnce technique that could enable arbitrary payloads if an attacker stages expected files and convinces a user to run them, emphasizes that this requires user interaction, and notes ConnectWise mitigations and updates that reduce risk for cloud and updated on-prem deployments.