CVE-2024-57727 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to do…
High KEV CVSS: 7.5

CVE-2024-57727

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
Vendor
Simple-help
Product
Simplehelp
CWE
CWE-22
Yayın Tarihi
2025-01-15 23:15:09
Güncelleme
2025-11-04 16:37:57
Source Identifier
cve@mitre.org
KEV Date Added
2025-02-13

Kategoriler

CWE-22 Simplehelp HIGH Simple-help 2025

Referanslar

https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727