CVE-2024-57727

CVE-2024-57727 is a set of multiple path traversal vulnerabilities (CWE-22) affecting SimpleHelp remote support software versions 5.5.7 and earlier. These flaws allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host through crafted HTTP requests. Sensitive files accessible include server configuration files containing various secrets and hashed user passwords. The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), reflecting high confidentiality impact with no requirements for privileges or user interaction.

Unauthenticated attackers with network access can exploit these path traversal issues by sending specially crafted HTTP requests to the SimpleHelp server. Successful exploitation enables the retrieval of arbitrary files, potentially exposing credentials, configuration data, and other secrets that could facilitate further compromise of the host or related systems.

Mitigation details are outlined in advisories from the vendor at https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier, security researcher disclosure at https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/, and CISA's Known Exploited Vulnerabilities catalog entry at https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727.

This CVE is listed in CISA's Known Exploited Vulnerabilities catalog, indicating real-world exploitation in the wild.