CVE-2024-9420

Summary

CVE-2024-9420 is a newly disclosed vulnerability affecting Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2. This use-after-free issue permits a remote, authenticated attacker to execute arbitrary code on vulnerable systems. By manipulating the memory of these Ivanti products, an attacker can achieve code execution and potentially gain full control over the affected system. Successful exploitation may lead to unauthorized access, data theft, or system compromise. It is recommended that users of Ivanti Connect Secure and Ivanti Policy Secure upgrade to their respective patched versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.