PT-2022-23620 · Connectwise · Connectwise Screenconnect

Published 2022-09-28 · Updated 2024-09-16 · CVE-2022-36781

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ConnectWise ScreenConnect versions 22.6 and below

Description The issue allows potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this to gain unauthorized access by repeatedly attempting access code combinations. This could lead to sensitive data exposure. ConnectWise has addressed this issue in later versions by implementing rate-limiting controls as a preventive measure against brute force attacks.

Recommendations For ConnectWise ScreenConnect versions 22.6 and below, update to a version later than 22.6 to address the issue by implementing rate-limiting controls. As a temporary workaround, consider configuring rate-limiting controls manually to prevent brute force attacks until a patch is applied. Restrict access to custom access tokens to minimize the risk of exploitation.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2022-36781

Affected Products

Connectwise Screenconnect

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-36781 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36781 · Vendor Advisory
• https://t.me/cvenotify/94822 · Telegram Post
• https://t.me/cibsecurity/50628 · Telegram Post
• https://gov.il/en/Departments/faq/cve_advisories · Note
• https://t.me/cvenotify/73793 · Telegram Post