CVE-2023-47256

概要

参考情報

• web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
• connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix · Vendor Advisory

screenconnect のその他の脆弱性

• CVE-2026-84869緊急 9.9悪用確認済み（CISA KEV）A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorizatio…
• CVE-2026-11596中 4.7In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user wit…
• CVE-2025-14823中 5.3In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related k…
• CVE-2025-14265緊急 9.1In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the inst…
• CVE-2025-3935高 7.2悪用確認済み（CISA KEV）ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState …