Simplehelp

3 CVEs product

Monthly

CVE-2024-57728 HIGH This Month

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Simplehelp
NVD
CVSS 3.1
7.2
EPSS
1.1%
CVE-2024-57727 HIGH KEV THREAT Act Now

SimpleHelp remote support software contains multiple path traversal vulnerabilities allowing unauthenticated remote attackers to download arbitrary files including server configuration and hashed passwords.

Path Traversal Simplehelp
NVD
CVSS 3.1
7.5
EPSS
94.0%
CVE-2024-57726 CRITICAL This Week

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Simplehelp
NVD
CVSS 3.1
9.9
EPSS
0.3%
CVE-2024-57728
EPSS 1% CVSS 7.2
HIGH This Month

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Simplehelp
NVD
CVE-2024-57727
EPSS 94% CVSS 7.5
HIGH KEV THREAT Act Now

SimpleHelp remote support software contains multiple path traversal vulnerabilities allowing unauthenticated remote attackers to download arbitrary files including server configuration and hashed passwords.

Path Traversal Simplehelp
NVD
CVE-2024-57726
EPSS 0% CVSS 9.9
CRITICAL This Week

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Simplehelp
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy