CNNVD-202512-3446 Information

CNNVD ID

CNNVD-202512-3446

CVE-2025-14823

  • CNNVD Published: 2025-12-18

Description (Chinese)

ConnectWise ScreenConnect是ConnectWise公司的一种自托管远程桌面软件应用程序。 ConnectWise ScreenConnect存在安全漏洞,该漏洞源于证书签名扩展配置处理不当,可能导致加密配置值泄露。

Description (English)

ConnectWise ScreenConnect is a self-hosted remote desktop software application for ConnectWise. ConnectWise ScreenConnect has a security loophole, which results from the inappropriate handling of the certificate signature extension configuration, which may lead to the encryption configuration being leaked.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

ConnectWise

Published

2025-12-18

Last Modified

2026-02-24

References

https://www.connectwise.com/company/trust/security-bulletins/2025-12-18-screenconnect-certificate-signing-extension-update

Patch

https://www.connectwise.com/company/trust/security-bulletins/2025-12-18-screenconnect-certificate-signing-extension-update

Share on: