Actively exploited · Published Oct 8, 2024 · Assigned by ivanti
CVE-2024-9380
High 7.2 Exploited
In plain English
A high-severity command injection in CSA (Cloud Services Appliance) from Ivanti. Attackers are actively exploiting it in the wild (listed by CISA on October 9, 2024). The chance it is exploited in the next 30 days is estimated at 58.3% (higher than 99.1% of all known vulnerabilities). As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
CISA guidance
As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
Federal agencies must remediate by Oct 30, 2024.
Official description
An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | CSA (Cloud Services Appliance) | see references |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H