CVSS 3.1 Score 7.8 of 10 (high)


Published Dec 14, 2023
Updated: Mar 26, 2024


CVE-2023-41720 is a vulnerability that affects all versions of Ivanti Connect Secure below 22.6R2. It allows an attacker with access to an Ivanti Connect Secure (ICS) appliance to escalate their privileges by exploiting a vulnerable installed application. This vulnerability can potentially lead to the attacker gaining elevated execution privileges on the affected system. The risk score for this vulnerability is 28, indicating a high level of severity. The base score is 7.8, with high impacts on integrity and confidentiality, and a required user interaction for exploitation. The attack vector is local, and the availability impact is also high. Remediation for this vulnerability would involve updating Ivanti Connect Secure to version 22.6R2 or above to mitigate the risk it poses to organizations using this product.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-41720 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options