Ivanti Avalanche Critical Buffer Overflow Vulnerabilities: CVE-2023-32560

Two critical vulnerabilities, collectively identified as CVE-2023-32560, have been discovered within Ivanti Avalanche, an enterprise mobility management (EMM) solution responsible for managing, monitoring, and securing various mobile devices.

The flaws have been classified as critical (CVSS v3: 9.8) and can be exploited remotely without requiring user authentication. This potentially enables malicious actors to execute arbitrary code on the targeted system.

Vulnerability card for CVE-2023-32560 (SOCRadar Vulnerability Intelligence Module)

Affected Versions and Exploitation of Ivanti Avalanche Vulnerabilities

The vulnerability …

authentication avalanche buffer buffer overflow classified critical critical vulnerabilities cve cvss devices emm enterprise enterprise mobility enterprise mobility management exploited flaws ivanti ivanti avalanche malicious malicious actors management mobile mobile devices mobility monitoring overflow responsible solution vulnerabilities