CVE-2023-46225

This entry covers CVE-2023-46225 affecting Ivanti Avalanche. The vulnerability is a stack-based buffer overflow in WLAvalancheService (Mobile Device Server) that can be triggered by specially crafted data packets, causing memory corruption and potentially remote code execution or Denial of Servic...

CVE-2023-46265

An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery SSRF...

CVE-2023-46216

CVE-2023-46216 affects Ivanti Avalanche (Mobile Device Server) prior to version 6.4.2. The vulnerability is described as memory corruption triggered by specially crafted data packets to the Mobile Device Server, leading to Denial of Service or remote code execution. Public sources (NVD/Red Hat/CN...

CVE-2023-46222

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46220

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46222

Ivanti Avalanche WLAvalancheService is affected by CVE-2023-46222. The issue is a stack-based buffer/ memory corruption vulnerability in the WLAvalancheService that can be triggered by receiving specially crafted data packets over the Mobile Device Server, potentially enabling Denial of Service o...

CVE-2023-46225

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46259

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46220

Ivanti Avalanche is affected by CVE-2023-46220 via a stack-based buffer overflow in the WLAvalancheService that handles Mobile Device Server data packets. The vulnerability can cause memory corruption and may lead to Denial of Service or remote code execution. Public sources (including ZDI and Ne...

CVE-2023-46257

CVE-2023-46257 affects Ivanti Avalanche/WLAvalancheService. A specially crafted data packet to the Mobile Device Server can cause memory corruption, leading to Denial of Service or remote code execution. Public sources (NVD/Nessus and Ivanti advisories) describe the vulnerability as a stack-based...

CVE-2023-41727

CVE-2023-41727 describes a memory corruption vulnerability in Ivanti Avalanche’s Mobile Device Server component, exploitable by specially crafted packets to cause DoS or remote code execution. Public docs tie this to Ivanti Avalanche prior to version 6.4.2 (noting a 9.8/critical impact per CVSS i...

CVE-2023-46260

Ivanti Avalanche (WLAvalancheService) is affected by CVE-2023-46260. A null pointer dereference/memory-corruption flaw in the Mobile Device Server handling specially crafted data packets can enable remote, unauthenticated exploitation, potentially causing DoS or code execution. Affected product l...

PT-2023-28066

Name of the Vulnerable Software and Affected Versions Mobile Device Server affected versions not specified Description An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption, which could result in a Denial of Service DoS or code execution...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.2. An attacker could exploit this vulnerability by sending specially crafted packets to the mobile device server, which could result ...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.2. An attacker could exploit this vulnerability by sending specially crafted packets to the mobile device server, which could result ...

CVE-2023-46220: Out-of-bounds Write

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46261: Out-of-bounds Write

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46260: Out-of-bounds Write

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46803: Out-of-bounds Write

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS...

CVE-2023-46224: Out-of-bounds Write

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...