What’s Vulnerable › Vulnerabilities

CVE-2023-47257

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-01 · updated 2026-06-17
• Weakness: CWE-94

Description

ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages.

Affected products

• ConnectWise Automate: all versions
• ConnectWise ScreenConnect: before 23.8.5 — fixed in 23.8.5

How to fix

Upgrade to a fixed version: ConnectWise ScreenConnect 23.8.5. Check the vendor advisory for mitigations.

References

• https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix
• https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
• https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix

Get alerted when CVE-2023-47257 or the next vulnerability affects your stack