CVE-2024-57727

HighKnown ExploitedRansomware

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated…

mitre·CWE-22·Published 2025-01-15

CVSS

7.5

EPSS

0.95

KEV

Yes

Exploits

cve.orgen

335 chars

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

NVDen

335 chars

NVDes

401 chars

El software de soporte remoto SimpleHelp v5.5.7 y versiones anteriores es vulnerable a múltiples vulnerabilidades de path traversal que permiten a atacantes remotos no autenticados descargar archivos arbitrarios del host SimpleHelp a través de solicitudes HTTP manipuladas. Estos archivos incluyen archivos de configuración del servidor que contienen varios secretos y contraseñas de usuario cifradas.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.1	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N