Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and Code Execution (CVE-2024-21894)

Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and Code Execution (CVE-2024-21894)

Ivanti recently released patches to fix multiple vulnerabilities found in their popular Connect Secure (ICS) and Policy Secure VPN gateways: CVE-2024-21894, CVE-2024-22053, CVE-2024-22052 and CVE-2024-22023.

These vulnerabilities present significant risks, as they can be exploited by unauthenticated attackers to compromise network infrastructure, steal sensitive data, and even execute arbitrary code. Of particular concern is that these vulnerabilities can be exploited without any user interaction.

What …

code code execution connect connect secure cve cve-2024 dos fix found gateways ics ivanti ivanti connect secure patches policy policy secure popular risks secure vpn vpn vulnerabilities vulnerable