Lucene search

[email protected]CVE-2023-46803

HistoryDec 19, 2023 - 4:15 p.m.

CVE-2023-46803

2023-12-1916:15:11

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-46803

attack

data packets

memory corruption

dos

mobile device server

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

72.6%

JSON

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS).

CPENameOperatorVersion
ivanti:avalancheivanti avalanchelt6.4.2
ivanti:avalancheivanti avalancheeq6.1.106.337
ivanti:avalancheivanti avalancheeq6.3.1.1507
ivanti:avalancheivanti avalancheeq6.1.106.496
ivanti:avalancheivanti avalancheeq6.3.2
ivanti:avalancheivanti avalancheeq6.3.3
ivanti:avalancheivanti avalancheeq6.4.1.236
ivanti:avalancheivanti avalancheeq6.4.1
ivanti:avalancheivanti avalancheeq6.4.1.207
ivanti:avalancheivanti avalancheeq6.3.4.153

CPE	Name	Operator	Version
ivanti:avalanche	ivanti avalanche	lt	6.4.2
ivanti:avalanche	ivanti avalanche	eq	6.1.106.337
ivanti:avalanche	ivanti avalanche	eq	6.3.1.1507
ivanti:avalanche	ivanti avalanche	eq	6.1.106.496
ivanti:avalanche	ivanti avalanche	eq	6.3.2
ivanti:avalanche	ivanti avalanche	eq	6.3.3
ivanti:avalanche	ivanti avalanche	eq	6.4.1.236
ivanti:avalanche	ivanti avalanche	eq	6.4.1
ivanti:avalanche	ivanti avalanche	eq	6.4.1.207
ivanti:avalanche	ivanti avalanche	eq	6.3.4.153

Rows per page:

1-10 of 211

References

download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

72.6%

JSON

Related for CVE-2023-46803

cvelist1 prion1 zdi1