CVE-2024-1709 - ScreenConnect Authentication Bypass Exploitation

SigmaHQ Detections@sigmaHQ

•updated Jan 30, 2025•0•25

Detects GET requests to '/SetupWizard.aspx/[anythinghere]' that indicate exploitation of the ScreenConnect vulnerability CVE-2024-1709, which is an authentication bypass vulnerability.