CVE-2024-38649

Summary

CVE-2024-38649 is a newly disclosed vulnerability affecting Ivanti Connect Secure before version 22.7R2.1. This issue involves an out-of-bounds write in IPsec, enabling a remote, unauthenticated attacker to trigger a denial of service (DoS) condition. The vulnerability can potentially be exploited to cause IPsec services to crash or become unresponsive, disrupting network communications. To mitigate this risk, Ivanti urges users to upgrade to the latest version of Connect Secure as soon as possible. The successful exploitation of this vulnerability could lead to significant network disruptions and potential loss of productivity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.