What’s Vulnerable › Vulnerabilities

CVE-2023-47256

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-01 · updated 2026-06-17
• Weakness: CWE-287

Description

ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings

Affected products

• ConnectWise Automate: all versions
• ConnectWise ScreenConnect: before 23.8.5 — fixed in 23.8.5

How to fix

Upgrade to a fixed version: ConnectWise ScreenConnect 23.8.5. Check the vendor advisory for mitigations.

References

• https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix
• https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix

Get alerted when CVE-2023-47256 or the next vulnerability affects your stack