CVE-2023-38543

🗓️ 14 Nov 2023 23:18:08Reported by hackeroneType

A vulnerability exists on Ivanti Secure Access Client below 22.6R1.1, allowing a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-38543	7 Jan 202519:40	–	circl
CNNVD	Ivanti Secure Access Client Security Vulnerability	14 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-38543	14 Nov 202323:18	–	cvelist
EUVD	EUVD-2023-42342	3 Oct 202520:07	–	euvd
Ivanti	Security fixes included in the latest Ivanti Secure Access Client Release	9 Nov 202323:59	–	ivanti
Tenable Nessus	Ivanti Secure Access Client < 22.6R1.1 Multiple Vulnerabilities	20 Dec 202300:00	–	nessus
NCSC	Vulnerabilities fixed in Ivanti Secure Access Client	13 Nov 202300:00	–	ncsc
NVD	CVE-2023-38543	15 Nov 202300:15	–	nvd
OSV	CVE-2023-38543	15 Nov 202300:15	–	osv
Prion	Design/Logic Flaw	15 Nov 202300:15	–	prion

NVD

Vulners

Node

ivanti secure_access_clientRange<22.6

ivanti secure_access_clientMatch22.6r1

AND

microsoft windowsMatch-

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "Secure Access Client Windows",
    "versions": [
      {
        "version": "22.6R1.1",
        "status": "affected",
        "lessThan": "22.6R1.1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
northwave-cybersecurity	www.northwave-cybersecurity.com/vulnerability-notice/denial-of-service-in-ivanti-secure-access-client-driver
forums	www.forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release

07 Jan 2025 19:15Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8

CVSS 38.8

EPSS0.00304

SSVC

CWE-770