DeutschShown in its original language — a full translation is planned for a future version.
Ivanti Connect Secure: Mehrere Schwachstellen
view advisory published 2023-12-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ivanti Connect Secure ausnutzen, um einen Denial of Service Angriff durchzuführen seine Rechte zu erweitern oder Code auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-39340US | high7.5 | — | ||
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service (DoS) of the applianc… | ||||
| CVE-2023-41720US | high7.8 | — | ||
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure (ICS) appliance can escalate their privil… | ||||
| CVE-2023-41719US | high7.2 | — | ||
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to rem… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan