Ivanti

الوصف

الثغرات

• CVE-2024-38657

  External control of a file name in ICS and IPS

• CVE-2025-22467

  Stack-based buffer overflow in ICS allows RCE

• CVE-2024-10644

  Code injection in ICS and IPS allows RCE

• CVE-2024-47908

  OS command injection in admin web console CSA allows RCE

المراجع

• February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs(يفتح في علامة تبويب جديدة)
• Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771(يفتح في علامة تبويب جديدة)