Ivanti Products Multiple Vulnerabilities

Release Date: 15 Nov 2024 4498 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities have been identified in Ivanti Products. A remote attacker could exploit these vulnerability to trigger denial of service condition, remote code execution, elevation of privilege, data manipulation and sensitive information disclosure on the targeted system.

Impact

Denial of Service
Remote Code Execution
Information Disclosure
Elevation of Privilege
Data Manipulation

System / Technologies affected

Ivanti Avalanche versions 6.4.5 and prior
Ivanti Connect Secure (ICS) versions 22.7R2.2 and prior
Ivanti Policy Secure (IPS) versions 22.7R1.1 and prior
Ivanti Secure Access Client (ISAC) versions 22.7R3 and prior
Ivanti Endpoint Manager (EPM) 2022 SU6 September security update and prior
Ivanti Endpoint Manager (EPM) 2024 September security update and prior

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Vulnerability Identifier

CVE-2024-7571
CVE-2024-8495
CVE-2024-8539
CVE-2024-9420
CVE-2024-9842
CVE-2024-9843
CVE-2024-11004
CVE-2024-11005
CVE-2024-11006
CVE-2024-11007
CVE-2024-29211
CVE-2024-32839
CVE-2024-32841
CVE-2024-32844
CVE-2024-32847
CVE-2024-34780
CVE-2024-34781
CVE-2024-34782
CVE-2024-34784
CVE-2024-34787
CVE-2024-37376
CVE-2024-37398
CVE-2024-37400
CVE-2024-38649
CVE-2024-38654
CVE-2024-38655
CVE-2024-38656
CVE-2024-39709
CVE-2024-39710
CVE-2024-39711
CVE-2024-39712
CVE-2024-47905
CVE-2024-47906
CVE-2024-47907
CVE-2024-47909
CVE-2024-50317
CVE-2024-50318
CVE-2024-50319
CVE-2024-50320
CVE-2024-50321
CVE-2024-50322
CVE-2024-50323
CVE-2024-50324
CVE-2024-50326
CVE-2024-50327
CVE-2024-50328
CVE-2024-50329
CVE-2024-50330
CVE-2024-50331

Source

Ivanti