Vulnerabilitycritical

Attackers injected novel DSLog backdoor into 670 vulnerable Ivanti devices (CVE-2024-21893)

Help Net Securityby @helpnetsecurityFeb 15, 2024 · 11:46 UTC (Feb 15, 2024)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2024-21893 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-21893 CVE-2024-21888 CVE-2023-46805 CVE-2024-21887

Tags: cve-2024-21893 cve-2024-21888 cve-2023-46805 cve-2024-21887 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024
CVE-2024-21888	A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate…	8.8	87%		Jan 31, 2024
CVE-2024-21893	SSRF in Ivanti Connect Secure, Policy Secure, and Neurons SAML Component	8.2	100%	KEVRansomware	Jan 31, 2024 KEV Jan 31, 2024

From the original article

2 min read at helpnetsecurity.com

Hackers are actively exploiting a vulnerability (CVE-2024-21893) in Ivanti Connect Secure, Policy Secure and Neurons for ZTA to inject a “previously unknown and interesting backdoor” dubbed DSLog.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.