CyberSec.Space Logo
返回 CVE 浏览器

CVE-2024-57727

🔥 Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-01-15
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

Affected Platforms (CPE)

📦
Simple Help

Simplehelp

< 5.5.8

References & Advisories

🔗 https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier
🔗 https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727

相关漏洞威胁

CVE-2026-485589.5

SimpleHelp SimpleHelp is vulnerable to SimpleHelp Authentication Bypass Vulnerability. Apply mitigations in accordance with vendo...

CVE-2025-367286.3

Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.

CVE-2025-367278.3

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.

CVE-2024-577287.2

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by u...