Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-57728

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.593
EPSS Ranking 98.3%
CVSS Severity
CVSS v3 Score 7.2
Proposed Action
SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
Ransomware Campaign
Unknown
Products affected by CVE-2024-57728


Contact Us

Shodan ® - All rights reserved