A file transfer flaw in ConnectWise ScreenConnect allows attackers to spread malware during remote support sessions, affecting both Cloud and On-Premise deployments. ConnectWise has confirmed the issue and stated a CVE identifier and official fix will be issued within the week of the September 3 advisory. The article does not provide specific version ranges, a fixed version, or a workaround at this time.
A file transfer flaw in ScreenConnect Remote Access Support and Access sessions affects both Cloud and On-Premise deployments, ConnectWise confirmed. “A CVE identifier and an official fix will be issued within the week,” the company wrote in its September 3 advisory. ScreenConnect is a popular remote support and access solution tailored for IT departments and managed service providers (MSPs). The platform can be hosted by ConnectWise (in their cloud) or self-hosted by organizations (on-prem or … More → The post Attackers spread malware through ScreenConnect file transfers appeared first on Help Net Security .