CISA and Partners Release Advisory on Threat Actors Exploiting Ivanti Connect Secure and Policy Secure Gateways Vulnerabilities

🗓️ 29 Feb 2024 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 25 Views

CISA warns of ongoing exploitation of Ivanti Connect Secure vulnerabilities by threat actors.

Reporter	Title	Published	Views	Family All 140
0day.today	Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit	22 Jan 202400:00	–	zdt
0day.today	Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit	21 Feb 202400:00	–	zdt
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	20 Jan 202419:15	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Connect_Secure	18 Jan 202413:25	–	githubexploit
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	3 Feb 202411:33	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Connect_Secure	14 Jan 202418:30	–	githubexploit
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	14 Jan 202409:25	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Connect_Secure	14 Jan 202418:30	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Ivanti Connect_Secure	2 Feb 202422:59	–	githubexploit
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	16 Jan 202420:59	–	githubexploit

Source	Link
cisa	www.cisa.gov/news-events/cybersecurity-advisories/aa24-060b
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46805
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21887
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21893
cisa	www.cisa.gov/resources-tools/resources/identifying-and-mitigating-living-land-techniques
cisa	www.cisa.gov/news-events/directives/ed-24-01-mitigate-ivanti-connect-secure-and-ivanti-policy-secure-vulnerabilities
cisa	www.cisa.gov/news-events/directives/supplemental-direction-v2-ed-24-01-mitigate-ivanti-connect-secure-and-ivanti-policy-secure
securityintelligence	www.securityintelligence.com/x-force/exploitation-of-exposed-ivanti-vulnerabilities/
akamai	www.akamai.com/blog/security-research/scanning-activity-ivanti-cve-february-2024
attackerkb	www.attackerkb.com/topics/FGlK1TVnB2/cve-2024-21893/rapid7-analysis

29 Feb 2024 12:00Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.1

CVSS 39.1

EPSS0.99999

SSVC

cisa ivanti vulnerabilities threat actors cybersecurity advisory detection methods mitigation guidance indicators of compromise.