Skip to main content

Simple Help

3 CVEs vendor

Monthly

CVE-2024-57728 Jan 15, 23:15 HIGH POC KEV THREAT Act Now

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Simplehelp Simple Help
NVD VulDB
CVSS 3.1
7.2
EPSS
1.1%
Threat
4.5
CVE-2024-57727 Jan 15, 23:15 HIGH POC KEV THREAT Act Now

SimpleHelp remote support software contains multiple path traversal vulnerabilities allowing unauthenticated remote attackers to download arbitrary files including server configuration and hashed passwords.

Path Traversal Simplehelp Simple Help
NVD VulDB
CVSS 3.1
7.5
EPSS
94.0%
Threat
7.3
CVE-2024-57726 Jan 15, 23:15 CRITICAL POC KEV THREAT Emergency

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Simplehelp Simple Help
NVD VulDB
CVSS 3.1
9.9
EPSS
0.3%
Threat
5.0
EPSS 1% 4.5 CVSS 7.2
HIGH POC KEV THREAT Act Now

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Simplehelp Simple Help
NVD VulDB
EPSS 94% 7.3 CVSS 7.5
HIGH POC KEV THREAT Act Now

SimpleHelp remote support software contains multiple path traversal vulnerabilities allowing unauthenticated remote attackers to download arbitrary files including server configuration and hashed passwords.

Path Traversal Simplehelp Simple Help
NVD VulDB
EPSS 0% 5.0 CVSS 9.9
CRITICAL POC KEV THREAT Emergency

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Simplehelp Simple Help
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy