Control vulnerabilities
2 known vulnerabilities in Control from ConnectWise. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest first
- 8.8 High severity
Control: Improper Neutralization of Special Elements in Output Used by a Downstream Component
ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded execu
- 9.8 Critical severity
Control: Improper Verification of Cryptographic Signature
In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a (different) at