VDB
BDU%3A2025-00725
BDU%3A2025-00725
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость программного обеспечения для удаленной поддержки SimpleHelp, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю раскрыть защищаемую информацию
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Simplehelp Ltd | SimpleHelp |
Timeline
- Jan 15, 2025 CVE Published
- Jan 15, 2025 PoC Published
- Jan 15, 2025 PoC Published
- Jan 15, 2025 PoC Published
- Jan 15, 2025 PoC Published
- Jan 15, 2025 PoC Published
- Jan 16, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 19, 2025 PoC Published
- Jan 21, 2025 PoC Published
- Jan 21, 2025 PoC Published
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727 url
- https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier advisory
- https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/ url
- https://thehackernews.com/2025/01/critical-simplehelp-flaws-allow-file.html url
- https://news.sophos.com/en-us/2025/05/27/dragonforce-actors-target-simplehelp-vulnerabilities-to-attack-msp-customers/ url