Jan. 31, 2024, 5:46 p.m. |

Center for Internet Security - Multi-State Information Sharing and Analysis Center www.cisecurity.org

Multiple Vulnerabilities have been discovered in Ivanti Products, the most severe of which could allow for remote code execution.



  • Ivanti Connect Secure is a SSL VPN solution for remote and mobile users.

  • Ivanti Policy Secure (IPS) is a network access control (NAC) solution which provides network access only to authorized and secured users and devices.

  • Ivanti Neurons for Zero Trust Access (nZTA) creates a secure connection from a device to web-based applications on-premises and in the cloud

    Successful exploitation could …

access access control a network code code execution connect control ips ivanti ivanti connect secure ivanti policy secure mobile nac network network access network access control policy products remote code remote code execution solution ssl ssl vpn vpn vulnerabilities

More from www.cisecurity.org / Center for Internet Security - Multi-State Information Sharing and Analysis Center

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Cybersecurity Engineer

@ Booz Allen Hamilton | USA, VA, Arlington (1550 Crystal Dr Suite 300) non-client

Invoice Compliance Reviewer

@ AC Disaster Consulting | Fort Myers, Florida, United States - Remote

Technical Program Manager II - Compliance

@ Microsoft | Redmond, Washington, United States

Head of U.S. Threat Intelligence / Senior Manager for Threat Intelligence

@ Moonshot | Washington, District of Columbia, United States

Customer Engineer, Security, Public Sector

@ Google | Virginia, USA; Illinois, USA