CyberSec.Space Logo
CVEブラウザに戻る

CVE-2024-57727

🔥 Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-01-15
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

Affected Platforms (CPE)

📦
Simple Help

Simplehelp

< 5.5.8

References & Advisories

🔗 https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier
🔗 https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727

関連する脆弱性情報

CVE-2026-485589.5

SimpleHelp SimpleHelp is vulnerable to SimpleHelp Authentication Bypass Vulnerability. Apply mitigations in accordance with vendo...

CVE-2025-367286.3

Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.

CVE-2025-367278.3

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.

CVE-2024-577287.2

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by u...