Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jan 22, 2024

CVE-2023-46805

High
EPSS 94.4%CISA KEVRansomware
Ivanti/Connect Secure and Policy Secure

Description

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

EPSS — Exploit Probability

94.4%

Higher than 100.0% of all CVEs

Required Action

Please apply mitigations per vendor instructions. For more information, please see: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-46805

Risk Assessment

CRITICAL
In CISA KEV
High EPSS
Ransomware

Details

Severity
High
EPSS
94.4%
CISA KEV
Yes
Ransomware
Known
Articles
0

Timeline

Published

Jan 10, 2024

Added to KEV

Jan 10, 2024

Remediation Due

Jan 22, 2024

Affected Product

Ivanti

Connect Secure and Policy Secure

View all Ivanti CVEs