Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-32560
HistoryAug 10, 2023 - 8:15 p.m.

Design/Logic Flaw

2023-08-1020:15:00
PRIOn knowledge base
www.prio-n.com
7
design flaw
logic flaw
wavelink avalanche manager
service disruption
arbitrary code execution
tenable
nvd

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.336 Low

EPSS

Percentile

96.9%

JSON

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.

Thanks to a Researcher at Tenable for finding and reporting.

Fixed in version 6.4.1.

CPENameOperatorVersion
avalanchelt6.4.1

Related

packetstorm 2
cve 1
zdt 2
cvelist 1
githubexploit 1
nessus 2
exploitdb 1
thn 2
rapid7blog 1
packetstorm
packetstorm
Ivanti Avalance Remote Code Execution
2023-09-04 00:00:00
Ivanti Avalanche MDM Buffer Overflow
2023-09-18 00:00:00
cve
cve
CVE-2023-32560
2023-08-10 20:15:10
zdt
zdt
Ivanti Avalanche < v6.4.0.0 - Remote Code Execution Exploit
2023-09-04 00:00:00
Ivanti Avalanche MDM Buffer Overflow Exploit
2023-09-18 00:00:00
cvelist
cvelist
CVE-2023-32560
2023-08-10 19:07:38
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Ivanti Avalanche
2023-08-17 03:39:37
nessus
nessus
Ivanti Avalanche Unauthenticated Stack-based Buffer Overflow (CVE-2023-32560)
2023-09-04 00:00:00
Ivanti Avalanche < 6.4.1 Multiple Vulnerabilities
2023-08-18 00:00:00
exploitdb
exploitdb
Ivanti Avalanche &lt;v6.4.0.0 - Remote Code Execution
2023-09-04 00:00:00
thn
thn
Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations
2023-08-16 10:38:00
Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software
2023-08-22 04:45:00
rapid7blog
rapid7blog
Metasploit 2023 Annual Wrap-Up: Dec. 29, 2023
2023-12-29 19:38:15

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.336 Low

EPSS

Percentile

96.9%

JSON
Related for PRION:CVE-2023-32560
packetstorm2cve1zdt2cvelist1githubexploit1nessus2exploitdb1thn2rapid7blog1