Ivanti Connect Secure & Policy Secure Multiple Vulnerabilities Advisory (CVE-2024-47905 et al.)

From this webpage screenshot, the following key information about the vulnerabilities can be obtained: 1. Vulnerability Descriptions: - CVE-2024-47905: Heap overflow vulnerability allowing remote attackers to cause a denial of service with administrative privileges. - CVE-2024-37400: Out-of-bounds read vulnerability allowing remote unauthenticated attackers to trigger an infinite loop, resulting in a denial of service. - CVE-2024-9420: Use-after-free vulnerability allowing remote authenticated attackers to execute remote code. - CVE-2024-47906: Local privilege escalation vulnerability allowing local authenticated attackers to escalate privileges. - CVE-2024-47907: Heap overflow vulnerability allowing remote unauthenticated attackers to cause a denial of service. - CVE-2024-8495: Out-of-bounds write vulnerability allowing remote unauthenticated attackers to cause a denial of service. - CVE-2024-38649: Parameter injection vulnerability allowing remote authenticated attackers to execute remote code with administrative privileges. - CVE-2024-38655: Parameter injection vulnerability allowing remote authenticated attackers to execute remote code with administrative privileges. - CVE-2024-39709: File permission error allowing local authenticated attackers to escalate privileges. - CVE-2024-39710: Parameter injection vulnerability allowing remote authenticated attackers to execute remote code with administrative privileges. - CVE-2024-39711: Parameter injection vulnerability allowing remote authenticated attackers to execute remote code with administrative privileges. - CVE-2024-39712: Command injection vulnerability allowing remote authenticated attackers to execute remote code with administrative privileges. - CVE-2024-11007: Command injection vulnerability allowing remote authenticated attackers to execute remote code with administrative privileges. - CVE-2024-11006: Command injection vulnerability allowing remote authenticated attackers to execute remote code with administrative privileges. - CVE-2024-11005: Reflected XSS vulnerability allowing remote unauthenticated attackers to gain administrative privileges. - CVE-2024-8539: Privilege escalation vulnerability allowing local authenticated attackers to modify sensitive configuration files. - CVE-2024-38654: Privilege escalation vulnerability allowing local authenticated attackers to create arbitrary folders. - CVE-2024-9842: Privilege escalation vulnerability allowing local authenticated attackers to modify sensitive configuration files. - CVE-2024-29211: Privilege escalation vulnerability allowing local authenticated attackers to modify sensitive configuration files. - CVE-2024-37398: Privilege escalation vulnerability allowing local authenticated attackers to escalate privileges. - CVE-2024-7571: Privilege escalation vulnerability allowing local authenticated attackers to escalate privileges. 2. Affected Versions: - Ivanti Connect Secure (ICS): Versions 22.7R2.3 and earlier. - Ivanti Policy Secure (IPS): Versions 22.7R1.2 and earlier. - Ivanti Secure Access Client (ISAC): Versions 22.7R3 and earlier. 3. Remediation: - Upgrade to the latest versions: Ivanti Connect Secure 22.7R2.3, Ivanti Policy Secure 22.7R1.2, and Ivanti Secure Access Client 22.7R4. 4. Disclosure: - These vulnerabilities were disclosed through a responsible disclosure program. There are no known instances of customer exploitation prior to public disclosure. 5. CWE Identifiers: - Each vulnerability is associated with a corresponding CWE number, used to classify security flaws in software. This information helps users understand the nature of the vulnerabilities, the affected versions, and how to resolve them by updating to the latest versions.

Goal Reached Thanks to every supporter — we hit 100%!

Ivanti Connect Secure & Policy Secure Multiple Vulnerabilities Advisory (CVE-2024-47905 et al.)