2024-033: Multiple Vulnerabilities in Ivanti Connect Secure

2024-033: Multiple Vulnerabilities in Ivanti Connect Secure ↗ source

April 4, 2024 CERT-EU Advisory

Source: https://cert.europa.eu/publications/security-advisories/2024-033/

Summary

Thevulnerability trackedasCVE-2024-21894isa severeflawinvolvinga heapoverflowin the IPSec component, enabling RCE and DoS without user interaction. Ivanti also fixed additional vulnerabilities [2] potentially leading to DoS attacks [1]. 22.5R1.3, 22.5R2.4, 22.6R2.3, 9.1R14.6, 9.1R15.4, 9.1R16.4, 9.1R17.4 and 9.1R18.5. CERT-EU recommends applying a patch as soon as possible [3].

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVE	CVSS	Affected
CVE-2024-21894	8.2 High	Ivanti Connect Secure A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious us…
CVE-2024-22053	8.2 High	Ivanti Connect Secure A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious us…
CVE-2024-22052	7.5 High	Ivanti Connect Secure A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated m…
CVE-2024-22023	5.3 Medium	Ivanti Connect Secure An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticate…

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Ivanti 35 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.