CVE-2024-39711: Critical severity ivanti pulse connect secure vulnerability
Published Nov 13, 2024
·Updated
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Affected Software
17 affected components
Ivanti Connect Secure<22.7R2.1, <9.1R18.7
Ivanti Policy Secure<22.7R1.1
Ivanti Connect Secure<22.7
Ivanti Connect Secure=22.7
Ivanti Connect Secure=22.7-r1
Ivanti Connect Secure=22.7-r1.1
Ivanti Connect Secure=22.7-r1.2
Ivanti Connect Secure=22.7-r1.3
Ivanti Connect Secure=22.7-r1.4
Ivanti Connect Secure=22.7-r1.5
Ivanti Connect Secure=22.7-r2
Ivanti Connect Secure=22.7-r2.1
Ivanti Connect Secure=22.7-r2.2
Ivanti Policy Secure<22.7
Ivanti Policy Secure=22.7
Ivanti Policy Secure=22.7-r1
Ivanti Policy Secure=22.7-r1.1
Event History
Nov 13, 2024
CVE Published
via MITRE·01:54 AM
Data Sourced
via MITRE·01:54 AM
DescriptionSeverity
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-39711?
CVE-2024-39711 is rated as critical due to its potential for remote code execution.
2
How do I fix CVE-2024-39711?
To fix CVE-2024-39711, upgrade Ivanti Connect Secure to version 22.7R2.1 or 9.1R18.7 and Ivanti Policy Secure to version 22.7R1.1.
3
Who is affected by CVE-2024-39711?
CVE-2024-39711 affects users of Ivanti Connect Secure and Ivanti Policy Secure versions prior to the specified patch versions.
4
Can CVE-2024-39711 be exploited remotely?
Yes, CVE-2024-39711 can be exploited remotely by an authenticated attacker with admin privileges.
5
What impact does CVE-2024-39711 have on systems?
CVE-2024-39711 allows an attacker to achieve remote code execution on affected systems.