CVE-2023-38543

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 15, 2023
Updated: Jan 7, 2025
CWE ID 770

Summary

CVE-2023-38543 is a recently disclosed vulnerability impacting all versions of Ivanti Secure Access Client below 22.6R1.1. This issue permits a locally authenticated attacker to take advantage of a susceptible configuration. Consequences of exploitation may result in a denial of service (DoS) condition on the affected user machine. Ivanti urges users to upgrade to the latest version to mitigate this risk. The specifics of the vulnerability remain undisclosed to prevent potential exploitation, but it is strongly advised that all relevant systems be updated promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Ivanti Secure Access Client

Affected Vendors

  • Ivanti Software Inc.