CVE-2024-47007

Summary

CVE-2024-47007 is a newly disclosed vulnerability affecting Ivanti Avalanche before version 6.4.5. An attacker can exploit this issue by triggering a NULL pointer dereference in WLAvalancheService.exe, resulting in a denial of service. This vulnerability is significant as it allows unauthenticated remote attackers to disrupt the targeted system, potentially causing service disruptions or other negative consequences. Ivanti has released a patch to address this issue, and it is strongly recommended that users update their systems as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.