CVE-2024-11007

Published Nov 12, 2024

Last updated 4 days ago

CVSS critical 9.1

Overview

Description
Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Source
3c1d8aa1-5a33-4ea4-8992-aadd6440af75
NVD status
Undergoing Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.1
Impact score
6
Exploitability score
2.3
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

3c1d8aa1-5a33-4ea4-8992-aadd6440af75
CWE-78

Social media

Hype score
Not currently trending

  1. [CVE-2024-11007: CRITICAL] Critical command injection vulnerability in Ivanti Connect Secure & Ivanti Policy Secure allows remote admin attackers to achieve remote code execution. Upgrade now to versions 22.7R2.1...#cybersecurity,#vulnerability https://t.co/4RWOe84gQ9 https:/

    @CveFindCom

    12 Nov 2024

    11 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References