CISA 將 ConnectWise ScreenConnect 認證繞過漏洞 CVE-2024-1709 列入已知利用目錄

已有來源支持的內容

地端實例應更新至 23.9.8 或廠商指定的已修復版本，並檢查新建立的管理員帳號與異常遠端工作階段。 ^[1]。

來源原文核對摘錄：「Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice.」 ^[1]。

來源原文核對摘錄：「On February 13, 2024, an independent researcher ethically and responsibly reported a potential critical ConnectWise ScreenConnect™ vulnerability using the ConnectWise vulnerability disclosure program through the ConnectWise Trust Center.」 ^[2]。