This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Ivanti Connect Secure and Policy Secure fix 5 vulnerabilities
Ivanti fixes 5 vulnerabilities in its products, 2 of them critical. Products and their fixes: Ivanti Connect Secure (ICS) - 22.7R2.4 Ivanti Policy Secure (IPS) - 22.7R1.2
Allows an authenticated remote attacker with administrator privileges to execute code in ICS and IPS [1].
The vulnerability is present in products:
- Ivanti Connect Secure; >=22.1R1, <22.7R2.3;
- Ivanti Policy Secure; >=22.1R1, <22.7R1.2;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-11634 at cve.org, NVD
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
Allows an authenticated remote attacker with administrator privileges to execute code in ICS [1].
The vulnerability is present in product:
- Ivanti Connect Secure; >=22.1R1, <22.7R2.4;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-11633 at cve.org, NVD
- CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
An unauthenticated remote attacker can carry out a DoS attack in ICS through an out-of-bounds read in the IPsec implementation [1].
The vulnerability is present in product:
- Ivanti Connect Secure; >=22.1R1, <22.7R2.1;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-37401 at cve.org, NVD
- CWE-125: Out-of-bounds Read at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
An authenticated remote attacker can bypass security restrictions and gain unauthorized access to information due to insufficient checks in Secure Application Manager in ICS [1].
The vulnerability is present in product:
- Ivanti Connect Secure; >=22.1R1, <22.7R2.4;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
More information:
- CVE-2024-9844 at cve.org, NVD
- CWE-602: Client-Side Enforcement of Server-Side Security at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
An unauthenticated remote attacker can carry out a DoS attack in ICS through a heap-based buffer overflow in the IPsec implementation [1].
The vulnerability is present in product:
- Ivanti Connect Secure; >=22.1R1, <22.7R2.3;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-37377 at cve.org, NVD
- CWE-122: Heap-based Buffer Overflow at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
By CESNET, z.s.p.o. Michaela Ručková on 11. 12. 2024.