exploit/linux/http/ivanti_connect_secure_rce_cve_2023_46805

weaponized

Ivanti Connect Secure Unauthenticated Remote Code Execution

view exploit source metasploittype exploitpublished 2024-01-10catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-21887US	critical9.1OT critical	100.0% (100th)	KEV	2024-01-12
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send special…
CVE-2023-46805US	high8.2OT critical	100.0% (100th)	KEV	2024-01-12
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing co…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.