ID:11972 - Exploit for Authentication bypass using an alternate path or channel in ScreenConnect - CVE-2024-1709

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication.

The vulnerability exists due to improper authentication. A remote non-authenticated attacker can bypass authentication process and gain full access to the system.

Note, the vulnerability is being actively exploited in the wild.

Remediation