Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Actively Exploited Chrome Zero-Day, CVE-2023-7024

Ivanti has issued security updates to address a total of 22 vulnerabilities identified in its Avalanche Mobile Device Management (MDM) product. Among these, 13 are of critical severity, demanding immediate attention.

Avalanche MDM is a system designed for centralized device management via an internet connection, facilitating supply chain mobility. With Ivanti Avalanche MDM, users can oversee device details, including battery power and location, manage device settings like Wi-Fi and GPS, and distribute or remove software.

These vulnerabilities impact older …

actively exploited address attention avalanche chrome chrome zero-day critical cve device device management exploited internet ivanti ivanti avalanche management mdm mobile mobile device mobile device management product rce security security updates severity system updates vulnerabilities zero-day