← CVE Radar
CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.
9.1 CRITICALEPSS 99.99%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.1 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| 9.1 | CRITICAL | 3.0hackerone (CNA) | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Jan 22, 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2024-21887
- Status
- Analyzed
- Assigner (CNA)
- hackerone
- Published
- Jan 12, 2024
- Last modified
- 2026-08-04 05:16 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
IvantiICS2 version ranges
- 9.1R18 through 9.1R18
- 22.6R2 through 22.6R2
IvantiIPS2 version ranges
- 9.1R18 through 9.1R18
- 22.6R1 through 22.6R1
References
- packetstormsecurity.com http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html
- forums.ivanti.com https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21887