Vulnerability Description
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Simple-Help | Simplehelp | < 5.5.8 |
Related Weaknesses (CWE)
References
- https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabiRelease Notes
- https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-US Government Resource
FAQ
What is CVE-2024-57727?
CVE-2024-57727 is a vulnerability with a CVSS score of 7.5 (HIGH). SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHe...
How severe is CVE-2024-57727?
CVE-2024-57727 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-57727?
Check the references section above for vendor advisories and patch information. Affected products include: Simple-Help Simplehelp.