A Vulnerability in Ivanti Connect Secure Could Allow for Arbitrary Code Execution
A vulnerability has been discovered in Ivanti Connect Secure (ICS) that could allow for arbitrary code execution. Ivanti Connect Secure is an enterprise-grade SSL VPN and zero-trust remote access gateway. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands.
Read at CIS / MS-ISAC Cybersecurity Advisories
- Vendor
- Ivanti
- Product
- Connect Secure
- Exposure class
- Edge / VPN / firewall
Why it ranks 27 (Notable)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Ivanti)
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CIS / MS-ISAC Cybersecurity Advisories (cisecurity.org)