CVE-2023-47256: Medium severity ConnectWise Automate vulnerability
Published Feb 1, 2024
·Updated
ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings
Affected Software
2 affected components
ConnectWise Automate
ConnectWise ScreenConnect<23.8.5
Event History
Feb 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-47256?
CVE-2023-47256 has been rated as a medium severity vulnerability due to its impact on local user connections to arbitrary relay servers.
2
How do I fix CVE-2023-47256?
To mitigate CVE-2023-47256, update ConnectWise ScreenConnect to version 23.8.5 or later.
3
Who is affected by CVE-2023-47256?
CVE-2023-47256 affects users of ConnectWise ScreenConnect versions prior to 23.8.5 and potentially local users of ConnectWise Automate.
4
What is the nature of the vulnerability in CVE-2023-47256?
CVE-2023-47256 involves an implicit trust of proxy settings, allowing local users to connect to arbitrary relay servers.
5
Is CVE-2023-47256 actively being exploited?
As of the latest reports, there is no indication that CVE-2023-47256 is actively being exploited in the wild.