CVE-2024-47905

Summary

CVE-2024-47905 is a newly disclosed vulnerability affecting Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2. This issue involves a stack-based buffer overflow, which can be exploited by a remote, authenticated attacker holding admin privileges to instigate a denial of service (DoS) attack. By manipulating specially crafted input data, the attacker can overwrite the stack memory, leading to application instability and potential crashes, effectively causing a service disruption. Ivanti urges users to update their software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.