CVE-2024-13167
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 787
Summary
CVE-2024-13167 is a newly disclosed vulnerability affecting Ivanti Environment Manager before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update. This issue permits an unauthenticated attacker to perform an out-of-bounds write, leading to a denial of service. The vulnerability can be exploited remotely, making it a significant security concern for organizations using the affected Ivanti versions. Organizations are strongly advised to apply the security updates as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.