CVE-2024-57727

SimpleHelp Path Traversal Vulnerability

Exploited in attacks Used by ransomware Critical 9.1 Attack chance: 97%

What it is

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

CISA: SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Deadline for US federal agencies: March 6, 2025

Added to the CISA list: February 13, 2025
Published: January 15, 2025
Severity: Critical 9.1 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 97% in the top 0.1% of all known vulnerabilities
Weakness: CWE-22
More details: NVD · CVE.org · CISA

All references (2)

More exploited flaws from SimpleHelp

Added	Vulnerability	Product	Severity	Attack chance
Jun 29, 2026	Authentication BypassCVE-2026-48558	SimpleHelp	Critical 9.5	78%
Apr 24, 2026	Missing AuthorizationCVE-2024-57726used by ransomware	SimpleHelp	Critical 9.9	66%
Apr 24, 2026	Path TraversalCVE-2024-57728used by ransomware	SimpleHelp	High 7.2	64%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.