exploit/linux/http/ivanti_connect_secure_rce_cve_2024_37404

weaponized

Ivanti Connect Secure Authenticated Remote Code Execution via OpenSSL CRLF Injection

view exploit source metasploittype exploitpublished 2024-10-08catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-37404US	high8.8	71.0% (99th)	Exploit	2024-10-18
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.