Actively exploited in the wild
SimpleHelp Path Traversal Vulnerability
SimpleHelp - SimpleHelp · Listed in the CISA KEV since 2025-02-13. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-57727
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
Risk Assessment
The risk includes leakage of sensitive data such as passwords and configuration secrets, which could lead to further attacks and system compromise.
Recommendation
It is recommended to immediately upgrade SimpleHelp to a version newer than 5.5.7 and restrict access to the service to trusted networks only.
Original NVD description (English source)
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.