CVE-2024-23532

—

CVSS 3.1

7.5 high

EPSS

2%p77

Published

Apr 19, 2024 (Apr 19, 2024)

Modified

Jun 17, 2026

Description

An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks. In certain conditions this could also lead to remote code execution.

Vendors: ivanti
Products: avalanche
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.