Vulnerability in Ivanti ICS
CVSS score
9.1
EPSS probability
%100.0
Risk score
18.2
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.
CVE-2024-21893 to CVE-2024-21887 Exploit Toolkit
The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
POC Checker for ivanti CVE-2024-21887 Command injcetion
Nuclei: Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) - Command Injection
Similar Vulnerabilities
Vulnerability in Ivanti Endpoint Manager Mobile
OS command injection in Ivanti Sentry
Code injection in N/a Ivanti EPM
Code injection in Ivanti Endpoint Manager Mobile
Vulnerability in Ivanti Connect Secure
Vulnerability in Ivanti Connect Secure
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-21887"