Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-32560
HistoryAug 10, 2023 - 8:15 p.m.

CVE-2023-32560

2023-08-1020:15:10
CWE-787
[email protected]
web.nvd.nist.gov
2
vulnerability
wavelink avalanche manager
cve-2023-32560
attacker
crafted message
service disruption
code execution
tenable
version 6.4.1

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.461 Medium

EPSS

Percentile

97.4%

JSON

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.

Thanks to a Researcher at Tenable for finding and reporting.

Fixed in version 6.4.1.

Affected configurations

NVD
Node
ivantiavalancheRange<6.4.1

Related

zdt 2
packetstorm 2
githubexploit 1
cve 1
nessus 2
cvelist 1
prion 1
exploitdb 1
thn 2
rapid7blog 1
zdt
zdt
Ivanti Avalanche < v6.4.0.0 - Remote Code Execution Exploit
2023-09-04 00:00:00
Ivanti Avalanche MDM Buffer Overflow Exploit
2023-09-18 00:00:00
packetstorm
packetstorm
Ivanti Avalanche MDM Buffer Overflow
2023-09-18 00:00:00
Ivanti Avalance Remote Code Execution
2023-09-04 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Ivanti Avalanche
2023-08-17 03:39:37
cve
cve
CVE-2023-32560
2023-08-10 20:15:10
nessus
nessus
Ivanti Avalanche Unauthenticated Stack-based Buffer Overflow (CVE-2023-32560)
2023-09-04 00:00:00
Ivanti Avalanche < 6.4.1 Multiple Vulnerabilities
2023-08-18 00:00:00
cvelist
cvelist
CVE-2023-32560
2023-08-10 19:07:38
prion
prion
Design/Logic Flaw
2023-08-10 20:15:00
exploitdb
exploitdb
Ivanti Avalanche &lt;v6.4.0.0 - Remote Code Execution
2023-09-04 00:00:00
thn
thn
Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations
2023-08-16 10:38:00
Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software
2023-08-22 04:45:00
rapid7blog
rapid7blog
Metasploit 2023 Annual Wrap-Up: Dec. 29, 2023
2023-12-29 19:38:15

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.461 Medium

EPSS

Percentile

97.4%

JSON
Related for NVD:CVE-2023-32560
zdt2packetstorm2githubexploit1cve1nessus2cvelist1prion1exploitdb1thn2rapid7blog1