CVE-2023-32560

Опубликовано: 10 авг. 2023

Источник: nvd

CVSS3: 8.8

CVSS3: 9.8

EPSS Критический

Описание

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.

Thanks to a Researcher at Tenable for finding and reporting.

Fixed in version 6.4.1.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*

Версия до 6.4.1 (исключая)

EPSS

Процентиль: 100%

0.91909

Критический

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-787

CWE-20

Связанные уязвимости

GHSA-m39h-xjmq-4vgf

CVSS3: 8.8

github

больше 2 лет назад

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1.

EPSS

Процентиль: 100%

0.91909

Критический

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-787

CWE-20