Vulnerability in Ivanti ICS
CVSS Skor
9.1
EPSS İhtimal
%100.0
Risk Skoru
18.2
Yayın
2 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.
CVE-2024-21893 to CVE-2024-21887 Exploit Toolkit
The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
POC Checker for ivanti CVE-2024-21887 Command injcetion
Nuclei: Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) - Command Injection
İlgili Benzer Açıklar
Vulnerability in Ivanti Endpoint Manager Mobile
OS command injection in Ivanti Sentry
Code injection in N/a Ivanti EPM
Code injection in Ivanti Endpoint Manager Mobile
Vulnerability in Ivanti Connect Secure
Vulnerability in Ivanti Connect Secure
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2024-21887"