SimpleHelp
SimpleHelp Remote Access Client
- 3 paths
- Per-user data
- Version 1
- Chuck Whitson
Paths on disk
3 paths
Notes
SimpleHelp is an RMM tool that has known vulnerabilities in version 5.5.7 and earlier.
These vulnerabilities, discovered in early January 2025, allow for upload / download of files as well as privileged escalation and have been known to be exploited by TAs.
See: CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728
References
4 links
- simple-help.com/kb---locating-the-remote-access-service-installation-folder(opens in new tab)
- simple-help.com/kb---locating-the-simplehelp-technician-app-installation-folder(opens in new tab)
- bleepingcomputer.com/news/security/hackers-exploiting-flaws-in-simplehelp-rmm-to-breach-networks/(opens in new tab)
- horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/(opens in new tab)