CVE-2024-57728 is a directory traversal (zip slip) vulnerability in SimpleHelp remote support software version 5.5.7 and earlier. It allows authenticated admin users to upload specially crafted zip files that can write arbitrary files anywhere on the host file system. Successful exploitation can lead to arbitrary code execution in the context of the SimpleHelp server user. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). No official patch or remediation information is currently available.

An attacker with admin privileges on the SimpleHelp server can exploit this vulnerability to write arbitrary files anywhere on the file system, which can lead to arbitrary code execution. This compromises the confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and full impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict admin access to trusted personnel only and monitor for suspicious activity related to file uploads. Avoid uploading untrusted zip files. Follow vendor communications for updates on patches or official mitigations.