NCSC-VD-2502-002-06
Severity Level: Critical
Reference No.: NCSC-VD-2502-002-06
Ivanti
Description
CVE-2024-38657: External control of a file name in ICS and IPS
CVE-2025-22467: Stack-based buffer overflow in ICS allows RCE
CVE-2024-10644: Code injection in ICS and IPS allows RCE
CVE-2024-47908: OS command injection in admin web console CSA allows RCE
Vulnerabilities
- CVE-2024-38657
External control of a file name in ICS and IPS
- CVE-2025-22467
Stack-based buffer overflow in ICS allows RCE
- CVE-2024-10644
Code injection in ICS and IPS allows RCE
- CVE-2024-47908
OS command injection in admin web console CSA allows RCE