ConnectWise warns of new ScreenConnect flaw without patch
-
ConnectWise is alerting administrators to a newly discovered vulnerability affecting its ScreenConnect remote access solution, with an official patch not yet available. The company has confirmed it expects to release a fix later this week, but until then, it is providing temporary mitigation steps to help reduce exposure.
The issue impacts the remote support and access tool, which is widely used by managed service providers (MSPs) and IT teams. Given the privileged nature of ScreenConnect deployments, any flaw in this software carries significant risk, as exploitation could potentially lead to unauthorized access or system compromise. While specific technical details of the vulnerability remain limited in the public advisory, ConnectWise is urging all users to treat the situation with urgency.
- Administrators should review the temporary measures outlined by ConnectWise and apply them as soon as possible.
- Consider restricting outbound network access from ScreenConnect instances to only necessary endpoints.
- Audit user accounts and sessions for any suspicious activity, especially those with elevated privileges.
- Monitor official ConnectWise channels for the prompt release of the security patch.
Until the permanent fix is deployed, organizations relying on ScreenConnect should balance operational needs against the heightened risk, potentially limiting remote access capabilities where feasible. This situation serves as a reminder that even trusted remote management tools can become attack vectors, requiring rapid response protocols.
Source: BleepingComputer
Is your team currently running ScreenConnect, and what immediate steps are you taking to restrict access while waiting for the vendor's patch?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login