CVE-2023-41724: Command Injection
Published Mar 31, 2024
·Updated
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.
Affected Software
1 affected component
Ivanti Standalone Sentry<9.19.0
Remediation
Event History
Mar 20, 2024
News Published
via BleepingComputer·05:08 PM
News Published
via BleepingComputer·05:10 PM
Mar 31, 2024
CVE Published
via MITRE·01:45 AM
Data Sourced
via MITRE·01:45 AM
DescriptionSeverity
Data Sourced
via NVD·02:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2023-41724?
CVE-2023-41724 is classified as a critical severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2023-41724?
To fix CVE-2023-41724, upgrade Ivanti Sentry to version 9.19.0 or higher.
3
What systems are affected by CVE-2023-41724?
CVE-2023-41724 affects all versions of Ivanti Standalone Sentry prior to 9.19.0.
4
Can CVE-2023-41724 be exploited remotely?
Yes, CVE-2023-41724 can be exploited by unauthenticated attackers within the same network.
5
What type of vulnerability is CVE-2023-41724?
CVE-2023-41724 is a command injection vulnerability that allows execution of arbitrary commands.