CVE-2024-11633: Critical severity ivanti pulse connect secure vulnerability
Published Dec 10, 2024
·Updated
Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution
Affected Software
12 affected components
Ivanti Connect Secure<22.7
Ivanti Connect Secure=22.7
Ivanti Connect Secure=22.7-r1
Ivanti Connect Secure=22.7-r1.1
Ivanti Connect Secure=22.7-r1.2
Ivanti Connect Secure=22.7-r1.3
Ivanti Connect Secure=22.7-r1.4
Ivanti Connect Secure=22.7-r1.5
Ivanti Connect Secure=22.7-r2
Ivanti Connect Secure=22.7-r2.1
Ivanti Connect Secure=22.7-r2.2
Ivanti Connect Secure=22.7-r2.3
Event History
Dec 10, 2024
CVE Published
via MITRE·06:47 PM
Data Sourced
via MITRE·06:47 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-11633?
CVE-2024-11633 is considered high severity due to its potential to allow remote code execution by authenticated attackers with admin privileges.
2
How do I fix CVE-2024-11633?
To fix CVE-2024-11633, upgrade Ivanti Connect Secure to version 22.7R2.4 or later.
3
What causes CVE-2024-11633?
CVE-2024-11633 is caused by an argument injection vulnerability that arises from improper input validation in Ivanti Connect Secure.
4
Who is affected by CVE-2024-11633?
CVE-2024-11633 affects all versions of Ivanti Connect Secure prior to 22.7R2.4.
5
What type of attack can CVE-2024-11633 facilitate?
CVE-2024-11633 can facilitate remote code execution attacks by exploited authenticated users.