Vulnerabilitycritical

Ivanti urges customers to fix critical RCE flaw in Standalone Sentry

Security Affairsby @securityaffairsMar 21, 2024 · 09:59 UTC (Mar 21, 2024)1 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-41724 CVE-2023-46805 CVE-2024-21887 CVE-2024-21893

Tags: cve-2023-41724 cve-2023-46805 cve-2024-21887 cve-2024-21893 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-41724	A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying…	8.8	13%		Mar 31, 2024
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024
CVE-2024-21893	SSRF in Ivanti Connect Secure, Policy Secure, and Neurons SAML Component	8.2	100%	KEVRansomware	Jan 31, 2024 KEV Jan 31, 2024

From the original article

1 min read at securityaffairs.com

Ivanti urges customers to address a critical remote code execution vulnerability impacting the Standalone Sentry solution. Ivanti addressed a critical remote code execution vulnerability, tracked as CVE-2023-41724 (CVSS score of 9. 6), impacting Standalone Sentry solution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.