New Ivanti RCE flaw may impact 16,000 exposed VPN gateways
ID: 383051c0-7650-5a4a-a7a8-015a816d983c
STIX ID: report--383051c0-7650-5a4a-a7a8-015a816d983c
Feed Name: Bleeping Computer
Threat Score
**Ivanti IPSec heap-overflow (CVE-2024-21894) exposes ~16,500 internet-facing Connect Secure/Policy Secure gateways to potential unauthenticated RCE or DoS; Ivanti has released fixes and urged patching while Shodan/Shadowserver telemetry quantified the exposed population and Mandiant reporting links the issue to prior state-linked exploitation and the use of web shells/SPAWN malware in related attacks.**
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.