CVE-2022-36781: ConnectWise - ScreenConnect Session Code Bypass
ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unauthorized access by repeatedly attempting access code combinations. ConnectWise has addressed this issue in later versions by implementing rate-limiting controls as a preventive measure against brute force attacks.
Other sources
WiseConnect - ScreenConnect Session Code Bypass. An attacker would have to use a proxy to monitor the traffic, and perform a brute force on the session code in order to get in. Sensitive data about the company , get in a session.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36781?
CVE-2022-36781 has a medium severity rating due to its potential for exploitation through brute force attacks.
How do I fix CVE-2022-36781?
To fix CVE-2022-36781, you should upgrade to ConnectWise ScreenConnect version 22.7 or later to ensure adequate rate-limiting controls are in place.
What versions are affected by CVE-2022-36781?
CVE-2022-36781 affects ConnectWise ScreenConnect versions 22.6 and below.
What type of attack does CVE-2022-36781 allow?
CVE-2022-36781 allows potential brute force attacks on custom access tokens due to inadequate security provisions.
Who is impacted by CVE-2022-36781?
Organizations using ConnectWise ScreenConnect versions 22.6 and below are impacted by CVE-2022-36781.