CVE-2024-57727 Scanner
CVE-2024-57727 Scanner - Path Traversal vulnerability in SimpleHelp
Used 3k times · 3.4k assets checked · domain, ipv4, subdomain
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2024-57727
7.5
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
Updated Nov 7, 2026View on NVD →
S4E scanner
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →