Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a (different) attacker-controlled executable file. It is plausible that the end user may allow the download and execution of this file to proceed. There are ConnectWise Control configuration options that add mitigations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ConnectWise Control 数据伪造问题漏洞
Vulnerability Description
ConnectWise Control是美国ConnectWise公司的一个自托管远程桌面软件应用程序。 ConnectWise Control 22.9.10032版本及之前版本存在数据伪造问题漏洞，该漏洞源于加密方式存在缺陷。攻击者利用该漏洞提升权限并执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A