ConnectWise Control 代码问题漏洞

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202001-1061

ConnectWise Control 19.3.25270.7185版本中存在代码问题漏洞。攻击者可通过将未签名的ZIP文件上传到服务器利用该漏洞执行代码。

来源:blog.huntresslabs.com

链接:https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34


来源:know.bishopfox.com

链接:https://know.bishopfox.com/advisories


来源:know.bishopfox.com

链接:https://know.bishopfox.com/advisories/connectwise-control


来源:www.crn.com

链接:https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox


来源:www.crn.com

链接:https://www.crn.com/slide-shows/managed-services/connectwise-control-attack-chain-exploit-20-questions-for-security-researcher-bishop-fox


来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-16514