CVE-2024-37400
CVSS 3.0 Score 7.5 of 10 (high)
Details
Published Nov 13, 2024
CWE ID 125
Summary
CVE-2024-37400 is a newly disclosed vulnerability affecting Ivanti Connect Secure before version 22.7R2.3. This issue involves an out-of-bounds read error, which enables a remote, unauthenticated attacker to induce an infinite loop. Consequently, the server experiences a denial of service condition, rendering it unavailable for legitimate use until the issue is resolved. This vulnerability poses a significant risk to organizations using Ivanti Connect Secure, necessitating prompt patching to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ivanti Connect Secure