CVE-2024-57727

Published Jan 15, 2025

Last updated 2 months ago

SimpleHelp

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-57727 is a path traversal vulnerability in SimpleHelp remote support software, affecting versions 5.5.7 and older. This flaw allows unauthenticated attackers to download arbitrary files from SimpleHelp servers via specially crafted HTTP requests. The types of files that could be accessed include server configuration files and potentially hashed passwords. This vulnerability, when combined with CVE-2024-57728 and CVE-2024-57726, can lead to full system compromise. Exploitation of this vulnerability chain has been observed in the wild, with threat actors using it to gain initial access to systems. It's recommended to update SimpleHelp to the latest version or uninstall it if no longer needed.

Description: SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
Source: cve@mitre.org
NVD status: Analyzed
Products: simplehelp

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: SimpleHelp Path Traversal Vulnerability
Exploit added on: Feb 13, 2025
Exploit action due: Mar 6, 2025
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov: CWE-22
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:simple-help:simplehelp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B51B617B-82A8-4B34-BE2E-2D3C9CDE6D12",
            "versionEndExcluding": "5.5.8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.